Automated Certificate Renewal: Difference between revisions
Jump to navigation
Jump to search
No edit summary |
No edit summary |
||
| (One intermediate revision by the same user not shown) | |||
| Line 1: | Line 1: | ||
=Automated Certificate Renewal= | |||
===Script Location=== | |||
<code>/usr/local/bin/renew-and-update-certs.sh</code> | <code>/usr/local/bin/renew-and-update-certs.sh</code> | ||
===Script Contents=== | |||
<syntaxhighlight> | <syntaxhighlight lang="bash"> | ||
#!/bin/bash | #!/bin/bash | ||
| Line 25: | Line 25: | ||
</syntaxhighlight> | </syntaxhighlight> | ||
===Task Scheduler Configuration=== | |||
'''Control Panel > Task Scheduler''' | |||
{| class="wikitable" | |||
|- | |||
! Setting !! Value | |||
|- | |||
| Task name || Auto-renew SSL and Update Navidrome | |||
|- | |||
| User || root | |||
|- | |||
| Schedule || Weekly (Sunday, 3:00 AM) | |||
|- | |||
| Script || <code>/usr/local/bin/renew-and-update-certs.sh</code> | |||
|} | |||
===How It Works=== | |||
# Script runs weekly | |||
# Checks all certificates for renewal (30 days before expiry) | |||
# Renews any expiring certificates via Let's Encrypt | |||
# If successful, copies new certs to Navidrome | |||
# Restarts Navidrome container with fresh certificates | |||
Latest revision as of 12:33, 29 March 2026
Automated Certificate Renewal[edit]
Script Location[edit]
/usr/local/bin/renew-and-update-certs.sh
Script Contents[edit]
#!/bin/bash
# Renew certificates
/usr/syno/sbin/syno-letsencrypt renew-all -v
# Check if renewal was successful (exit code 0)
if [ $? -eq 0 ]; then
# Update Navidrome certificates
cp /usr/syno/etc/certificate/system/default/RSA-cert.pem /volume2/docker/navidrome/ssl/certificate.crt
cp /usr/syno/etc/certificate/system/default/RSA-privkey.pem /volume2/docker/navidrome/ssl/private.key
chmod 644 /volume2/docker/navidrome/ssl/certificate.crt
chmod 600 /volume2/docker/navidrome/ssl/private.key
docker restart navidrome
echo "Certificates renewed and Navidrome updated"
else
echo "Certificate renewal failed, skipping Navidrome update"
fi
Task Scheduler Configuration[edit]
Control Panel > Task Scheduler
| Setting | Value |
|---|---|
| Task name | Auto-renew SSL and Update Navidrome |
| User | root |
| Schedule | Weekly (Sunday, 3:00 AM) |
| Script | /usr/local/bin/renew-and-update-certs.sh
|
How It Works[edit]
- Script runs weekly
- Checks all certificates for renewal (30 days before expiry)
- Renews any expiring certificates via Let's Encrypt
- If successful, copies new certs to Navidrome
- Restarts Navidrome container with fresh certificates