Updating my e-mail address with certbot

[sahsanu]

Hi @gauthier,

@gauthier

Is it something to do after the 1st time we see the line with certbot.service appear in the this list of timers (in order to execute it once at least)?

You don't have to do anything, the timer is working fine but maybe I don't get what yout mean.

@gauthier

And what if I want to delete an existing timer? Should I remove the related line in the /etc/cron.d/certbot file? or it’s somewhere else that the timer (related to systemd) is defined?

I wrote a post regarding this some time ago Cerbot cron job? - #5 by sahsanu if you want to stop the timer take a look to this post Can't renew cert cause of rateLimited - #7 by sahsanu

@gauthier

I assume it’s better to edit directly the /etc/cron.d/certbot file than running sudo crontab -e if we are using systemd. I got it right?

@gauthier

I assume it’s better to edit directly the /etc/cron.d/certbot file than running sudo crontab -e if we are using systemd. I got it right?

In your case, /etc/cron.d/certbot is executed but does nothing because you are using systemd. I explain this in the first link I posted above.

@gauthier

I noticed that Nginx reloads very fast, but maybe it can have a negative impact on the navigation as my app doesn’t load any other page after the 1st access to the site (everything is made with Javascript and sockets then). Don’t you think?

You shouldn't have issues https://stackoverflow.com/questions/43088363/how-nginx-reload-work-why-it-is-zero-downtime but it is worth to check it by yourself.

@gauthier

So I have this:

webroot_path = /home/ubuntu/letsencrypt,

but not these 2 lines:

rsa_key_size = 2048
post_hook = systemctl reload nginx

I assume I should just add

post_hook = systemctl reload nginx

after

account = 1234567890ABCDEFGHIJKLMNOPQRSTUV

It was just an example, you don't need the rsa_key_size nor remove anything, just add

post_hook = systemctl reload nginx

after the account and you will be good ;).

@gauthier

to remove webroot_path = /home/ubuntu/letsencrypt,

and to add rsa_key_size = 2048 (this line seems to be useless as ssllabs website already reports for my app an A+ overall rating, mentioning “Certificate #1: RSA 2048 bits (SHA256withRSA)”: SSL Server Test: app.proj6ct.com (Powered by Qualys SSL Labs))

As I said, you don't need to remove anything nor add anything else but the post_hook.

@gauthier

PS: “Cordialement” in french is like “Regards” in english, so more formal than “Cheers”. I would translate “Cheers” more like “Amicalement” in french.

I've taken note of this, merci.

Amicalement,
sahsanu