> > On 2/21/24 10:07, Stuart Henderson wrote: > > You might like to investigate ~ in crontab(5), e.g. "~ 0,12" and lose > > the "sleep". > > > > Wouldn't it be better to have certbot write files into a directory > > served by httpd so you don't need the "rcctl stop" though? > > > Yes, it would be better. Today had a problem in which rcctl stop worked, but > rcctl start didn't. > Seems like --webroot from certbot can do the trick. Will test in a few days > with an expiring certificate.
Another option is to use acme-client(1). Provided that you are happy with lets encrypt or buypass this could be really easy * It is in base so it will work out-of-the-box and you don't need to install any packages for this task. * It has super easy config. * It's typically usage is to work with httpd and uses the correct directories by default. * It is no python