automating restarting nginx after letsencrypt cert renewed

[urkle]

We have a proxmox MG 7.2-1 server that is setup to expose the quarantine server as documented in this article. However, we found out a missed scenario in that tutorial. When using LetsEncrypt for SSL, proxmox does not restart the nginx server when renewing, thus it continues to serve the now revoked prior certificate!

Is there anyway to hook into the letsencrypt process in Proxmox to have it restart nginx?

From scouring the code it appears not. I did find the restart_after_cert_update method in PMG::API2::Certificates and modified it manually to restart nginx, but a more configurable/non source-code modifying approach would be better.

 

[Stoiko Ivanov]

Is there anyway to hook into the letsencrypt process in Proxmox to have it restart nginx?

No this is currently not possible - I would consider setting up a different ACME client (acme.sh proper/certbot/....) manually if you need such functionality.

The ACME client in PMG (which shares quite a bit of its implementation, with the one from PVE) is not as featureful (e.g. no support for having a directory for the stand-alone challenge, it needs to create a listener on port 80) - and thus also a bit simpler.

I hope this helps!

 

[urkle]

@Stoiko Ivanov Would a patch be accepted that adds a configuration setting to allow a custom post-script to be run when renewing certs?