OpenNeo/openneo-code
OpenNeo/openneo-code
1
0
Fork 0
Code Pull requests Activity

Restart every week, to help ensure SSL certificate renews

Browse source 
Oh right, I dealt with this a few months ago too: I got a notice from
Let's Encrypt that our code.openneo.net SSL certificate was going to
expire soon. And last time, restarting the Forgejo service fixed it and
got a new certificate issued immediately!

My inference is that the logic to check on the certificate status only
happens on startup. So, let's add code to the service file to ensure
that Forgejo will terminate after 7 days of runtime; and the
`Restart=always` setting will ensure that it comes immediately back up.
This commit is contained in:
Emi Matchu 2024-06-10 13:03:19 -07:00
parent fcc9a0a3ce
commit a9db85d7c8
1 changed files with 3 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

3
files/forgejo.service
View file

@ -51,6 +51,9 @@ After=network.target
###
[Service]
# NOTE: I found that Let's Encrypt certificates only renew when the service
# starts, so let's make sure we're restarting every so often.
RuntimeMaxSec=7d
# Uncomment the next line if you have repos with lots of files and get a HTTP 500 error because of that
# LimitNOFILE=524288:524288
RestartSec=2s