`cron.d-cert-fleet-fix`

7 lines
# TK-12164: renew any LE cert the certbot.timer failed on (expiring <30d), 1st + 15th at 01:xx America/Los_Angeles.
# Server is UTC; 08 and 09 UTC both fire and the script's --cron guard keeps only the run that is 1am Pacific (DST-proof).
# Undo: rm /etc/cron.d/cert-fleet-fix
SHELL=/bin/bash
PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
0 8,9 1,15 * * root /root/cert-fleet-fix.sh --cron >> /var/log/cert-fleet-fix.log 2>&1