TK-12164: record the installed /etc/cron.d/cert-fleet-fix (1st+15th, 1am PT)

14645102ea1fa90d36287455e9f8e59afea59e30 · 2026-09-24 16:13:21 -0700 · Steve Abrams

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>

Files touched

A cron.d-cert-fleet-fix

Diff

commit 14645102ea1fa90d36287455e9f8e59afea59e30
Author: Steve Abrams <steve@designerwallcoverings.com>
Date:   Thu Sep 24 16:13:21 2026 -0700

    TK-12164: record the installed /etc/cron.d/cert-fleet-fix (1st+15th, 1am PT)
    
    Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
---
 cron.d-cert-fleet-fix | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/cron.d-cert-fleet-fix b/cron.d-cert-fleet-fix
new file mode 100644
index 0000000..ba99240
--- /dev/null
+++ b/cron.d-cert-fleet-fix
@@ -0,0 +1,6 @@
+# TK-12164: renew any LE cert the certbot.timer failed on (expiring <30d), 1st + 15th at 01:xx America/Los_Angeles.
+# Server is UTC; 08 and 09 UTC both fire and the script's --cron guard keeps only the run that is 1am Pacific (DST-proof).
+# Undo: rm /etc/cron.d/cert-fleet-fix
+SHELL=/bin/bash
+PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
+0 8,9 1,15 * * root /root/cert-fleet-fix.sh --cron >> /var/log/cert-fleet-fix.log 2>&1

← abcea51 TK-12164: renew most-urgent lineages first (expired, then fe · back to Kamatera Ops · (newest)