How to automate the complete cert renewal including nginx restart?

godfuture · 28. Mai 2018

Hi gys,
I have searched the internet quite a time and the only practical solution I found was to restart the webserver. But I am sceptical, renewing the certificate is a simple maintenance task. Normal business. Is restarting really the only possible solution to update the certificate shown in the browser (nginx in my case)?

If no, what would I have to do? Cache refresh at client side does not work....If yes, how could the restart be automated such that after successful renewal with the letsencrypt plugin my nginx is restarted as well?

Thank you for sharing!

ryecoaaron · 28. Mai 2018

Pretty sure you only have to reload (not restart) nginx for a new cert. I didn't add that to the letsencrypt plugin because not everyone is using the cert for OMV's nginx install. I guess I could look at adding it as an option.

godfuture · 30. Mai 2018

The option sounds cool, cause then my letsencrypt cert renewal is 100% automated.

danielwbn · 8. Januar 2019

Zitat von ryecoaaron

I guess I could look at adding it as an option.

I like this idea! Has there been any progress on this?

In the meantime, is it possible to reload (or restart) nginx from the webgui? I couldn't find a way other than via a shell or restarting the whole omv server.

ryecoaaron · 8. Januar 2019

Zitat von danielwbn

Has there been any progress on this?

No because I decided not to port the nginx plugin to OMV 5.x in favor of using docker.

Zitat von danielwbn

is it possible to reload (or restart) nginx from the webgui?

Not really. You could manually run a scheduled job with the command of systemctl restart nginx

How to automate the complete cert renewal including nginx restart?

Jetzt mitmachen!

Tags