This PR contains the following updates:
| Package | Update | Change |
|---|---|---|
| [certbot](https://github.com/certbot/certbot) | major | `==3.3.0` -> `==4.0.0` |
| [certbot-dns-cloudflare](https://github.com/certbot/certbot) | major | `==3.3.0` -> `==4.0.0` |
---
### Release Notes
<details>
<summary>certbot/certbot (certbot)</summary>
### [`v4.0.0`](https://github.com/certbot/certbot/releases/tag/v4.0.0): Certbot 4.0.0
[Compare Source](https://github.com/certbot/certbot/compare/v3.3.0...v4.0.0)
##### Added
- The --preferred-profile and --required-profile flags allow requesting a profile.
https://datatracker.ietf.org/doc/draft-aaron-acme-profiles/
##### Changed
- Certificates now renew with 1/3rd of lifetime left (or 1/2 of lifetime left,
if the lifetime is shorter than 10 days). This is a change from a hardcoded
renewal at 30 days before expiration. The config field renew_before_expiry
still overrides this default.
- removed `acme.crypto_util._pyopenssl_cert_or_req_all_names`
- removed `acme.crypto_util._pyopenssl_cert_or_req_san`
- removed `acme.crypto_util.dump_pyopenssl_chain`
- removed `acme.crypto_util.gen_ss_cert`
- removed `certbot.crypto_util.dump_pyopenssl_chain`
- removed `certbot.crypto_util.pyopenssl_load_certificate`
##### Fixed
- Moved `RewriteEngine on` directive added during apache http01 authentication
to the end of the virtual host, so that it overwrites any `RewriteEngine off`
directives that already exist and allows redirection to the challenge URL.
More details about these changes can be found on our GitHub repo.
</details>
---
### Configuration
📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.
♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about these updates again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box
---
This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4yNTIuMCIsInVwZGF0ZWRJblZlciI6IjM5LjI1Mi4wIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbXX0=-->
Reviewed-on: #52
Co-authored-by: Renovate Bot <renovate@mrmeeb.stream>
Co-committed-by: Renovate Bot <renovate@mrmeeb.stream>
This PR contains the following updates:
| Package | Update | Change |
|---|---|---|
| [certbot](https://github.com/certbot/certbot) | major | `==2.11.0` -> `==3.1.0` |
| [certbot-dns-cloudflare](https://github.com/certbot/certbot) | major | `==2.11.0` -> `==3.1.0` |
---
### Release Notes
<details>
<summary>certbot/certbot (certbot)</summary>
### [`v3.1.0`](https://github.com/certbot/certbot/releases/tag/v3.1.0): Certbot 3.1.0
[Compare Source](https://github.com/certbot/certbot/compare/v3.0.1...v3.1.0)
##### Added
-
##### Changed
- Python 3.8 support was removed.
- certbot-dns-rfc2136's minimum required version of dnspython is now 2.6.1.
- Updated our Docker images to be based on Alpine Linux 3.20.
- Our runtime dependency on setuptools has been dropped from all Certbot
components.
- Certbot's packages no longer depend on library importlib_resources.
##### Fixed
- Included an OpenSSL library that was missing in our Certbot snap fixing
crashes affecting 32-bit ARM users.
More details about these changes can be found on our GitHub repo.
### [`v3.0.1`](https://github.com/certbot/certbot/releases/tag/v3.0.1): Certbot 3.0.1
[Compare Source](https://github.com/certbot/certbot/compare/v3.0.0...v3.0.1)
##### Fixed
- Removed a CryptographyDeprecationWarning that was being displayed to users
when checking OCSP status.
More details about these changes can be found on our GitHub repo.
### [`v3.0.0`](https://github.com/certbot/certbot/releases/tag/v3.0.0): Certbot 3.0.0
[Compare Source](https://github.com/certbot/certbot/compare/v2.11.0...v3.0.0)
##### Added
-
##### Changed
- The update_symlinks command was removed.
- The `csr_dir` and `key_dir` attributes on
`certbot.configuration.NamespaceConfig` were removed.
- The `--manual-public-ip-logging-ok` command line flag was removed.
- The `--dns-route53-propagation-seconds` command line flag was removed.
- The `certbot_dns_route53.authenticator` module has been removed. This should
not affect any users of the plugin and instead would only affect developers
trying to develop on top of the old code.
- Support for Python 3.8 was deprecated and will be removed in our next planned
release.
##### Fixed
-
More details about these changes can be found on our GitHub repo.
</details>
---
### Configuration
📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.
♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about these updates again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box
---
This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS40Mi4xIiwidXBkYXRlZEluVmVyIjoiMzkuNDIuMSIsInRhcmdldEJyYW5jaCI6Im1hc3RlciIsImxhYmVscyI6W119-->
Reviewed-on: #42
Co-authored-by: Renovate Bot <renovate@mrmeeb.stream>
Co-committed-by: Renovate Bot <renovate@mrmeeb.stream>
When Renovate acts too quickly, weirdness can occur, especially when more core packages like Alpine are updated - things haven't had time to propogate if we start updating less than an hour after the release. Waiting 7 days should give plenty of time for other maintainers to update their packages and for things to distribute.
Reviewed-on: #31
Add missing shebangs that cause `S6 warning: unable to spawn ./finish: Exec format error` when `ONESHOT=true`. Fixes#28
Also brings the method for killing a container via service exit inline with s6's documented method
Reviewed-on: #29
@ -4,10 +4,9 @@ Dockerised Certbot that utilises cron to schedule creating and renewing SSL cert
## Tags
|Tag |Description|
|-------|-----------|
|latest |Latest image built from the main branch. Usually coincides with a tagged release.|
|develop|Latest image built from the develop branch. Commits are made to the develop branch before being merged to main. Old versions of `develop` are removed after 14 days.|
I use the [Feature Branch](https://www.atlassian.com/git/tutorials/comparing-workflows/feature-branch-workflow) workflow. The `latest` tag contains all of the latest changes that have been merged from individual feature branches. Feature branches are squashed into `master`.
Pinned releases are created by creating a tag off `master` to capture the repo in a particular state. They are recommended for stability.
| INTERVAL | 0 */6 ** * | How often certbot attempts to renew the certificate. Cron syntax |
| CERT_COUNT | 1 | How many certificates certbot will try to issue. [Details here](https://git.mrmeeb.stream/MrMeeb/certbot-cron-docker#multiple-certificates) |
| APPRISE_URL | None | URL for Apprise notifications. [Syntax](https://github.com/caronc/apprise?tab=readme-ov-file#supported-notifications)
| NOTIFY_ON_SUCCESS | false | Notify on a successful renewal attempt. Note that this isn't just when the cert is renewed, but on every renewal attempt. |
| NOTIFY_ON_FAILURE | false | Notify on a failed renewal attempt.
echo"Renewal attempt of certificate for ${RENEWAL_DOMAINS} succeeded"
if["${NOTIFY_ON_SUCCESS}"="true"];then
apprise -b "Renewal of certificate for ${RENEWAL_DOMAINS} succeeded"${APPRISE_URL}
fi
else
echo"Renewal attempt of certificate for ${RENEWAL_DOMAINS} failed"
if["${NOTIFY_ON_FAILURE}"="true"];then
apprise -b "Renewal of certificate for ${RENEWAL_DOMAINS} failed"${APPRISE_URL}
fi
fi
}
Reference in New Issue
Block a user
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
