On Tue, 10 Sep 2019 07:52+0700, Victor Sudakov wrote:

> Trond Endrestøl wrote:
> > 
> > #minute     hour    mday    month   wday    who     command
> > 
> > 52  4       1       *       *       root    certbot renew --quiet 
> > --pre-hook "service apache24 stop" --post-hook "service apache24 start"
> > 52  1       15      *       *       root    certbot renew --quiet 
> > --pre-hook "service apache24 stop" --post-hook "service apache24 start"
> 
> Is it safe to run certbot as root? 

It needs access to TCP port 443 to run some checks. Hence the need to 
stop and start apache or you other regular webserver.

-- 
Trond.
_______________________________________________
freebsd-security@freebsd.org mailing list
https://lists.freebsd.org/mailman/listinfo/freebsd-security
To unsubscribe, send any mail to "freebsd-security-unsubscr...@freebsd.org"

Reply via email to