renew ssl certs automatically and clear out expired

 Letsencrypt used to auto fix your expired certs. This no longer happens. Here's a script to do it.

Flags:

--delete : remove expired certs

--renew: renew soon-to-expire certs (3< days)

#!/bin/bash
# check-certs.sh
base="/etc/letsencrypt/archive"
delete_mode=0
renew_mode=0
if [ "$1" == "--delete" ]; then
    delete_mode=1
elif [ "$1" == "--renew" ]; then
    renew_mode=1
fi
# First: find all current certs in archive
declare -A cert_status
find "$base" -type f -name "cert*.pem" | while read cert; do
    domain=$(echo "$cert" | sed -E "s|$base/([^/]+)/cert[0-9]+\.pem|\1|")
    expiry=$(openssl x509 -enddate -noout -in "$cert" | cut -d= -f2)
    exp_epoch=$(date -d "$expiry" +%s)
    now_epoch=$(date +%s)
    days_left=$(( (exp_epoch - now_epoch) / 86400 ))
    echo "$domain: $expiry  ($days_left days left)"
    if [ $delete_mode -eq 1 ] && [ $days_left -lt 0 ]; then
        echo "Deleting expired cert: $cert"
        rm -f "$cert"
    fi
    if [ $renew_mode -eq 1 ] && [ $days_left -le 3 ]; then
        echo "Renewing cert for $domain..."
        certbot certonly --webroot -w "/var/www/$domain" -d "$domain" -d "www.$domain" -m my@email.co.za --agree-tos --no-eff-email --non-interactive --quiet
    fi
    cert_status["$domain"]=1
done
if [ $renew_mode -eq 1 ]; then
    # Check apache configs for missing certs
    grep -h -R "ServerName" /etc/apache2/sites-enabled/ | awk '{print $2}' | while read domain; do
        if [ -z "${cert_status[$domain]}" ]; then
            echo "No cert found for $domain. Creating new cert..."
            certbot certonly --webroot -w "/var/www/$domain" -d "$domain" -d "www.$domain" -m my@email.co.za --agree-tos --no-eff-email --non-interactive --quiet
        fi
    done
fi

Popular posts from this blog

Automatically Fix Song Metadata and Filenames on Linux with Beets

 🎵 Automatically Fix Song Metadata and Filenames on Linux with Beets Tired of sorting through unknown MP3s with cryptic filenames like Track01.mp3? Sick of missing album info, incorrect genres, and zero cover art? Here's a clean way to batch-fix your music collection with open source tools — no manual editing required. ✅ What You’ll Use beets — the core tool that organizes, renames, and tags your music by matching against the MusicBrainz database. libchromaprint-tools — provides fpcalc, which generates audio fingerprints to identify unlabeled tracks. ffmpeg (optional) — used by beets for transcoding or embedded cover art processing. 🔧 Installation sudo apt update sudo apt install beets libchromaprint-tools ffmpeg 🚀 One Command to Organize It All beet import /path/to/your/music/ Beets will: Fingerprint each file Query MusicBrainz for metadata Rename files (e.g., Artist - Title.mp3) Write correct ID3/metadata tag Optionally move files into organized folders 📁 Example Output Your ...
Read more

DropboxMount turns your Dropbox into a live, on-demand drive instead of a sync folder.

DropboxMount turns your Dropbox into a live, on-demand drive instead of a sync folder. Instead of duplicating gigabytes of files onto your computer, it creates a special mount point that behaves like a network filesystem. Your Dropbox directory appears instantly, with all files and folders visible, but the contents are only downloaded when you open them. Saving changes writes them straight back to the cloud. This means you can browse your entire Dropbox without using up local disk space, and the experience feels closer to an NFS or WebDAV share than the heavyweight Dropbox desktop client. How to Set Up DropboxMount on Linux  This method uses FUSE (Filesystem in Userspace) to mount Dropbox as if it were a local drive. The tool we use is rclone, which supports Dropbox natively.  1. Install rclone sudo apt update sudo apt install rclone 2. Configure Dropbox in rclone rclone config - Choose **n** for a new remote. - Name it something like `dropboxmount`. - Select `Dropbox` from t...
Read more

script to show all files with disk usage sizes

Normally to get the disk usage of a folder you use get properties on the rightclick or similar. However there are hidden files starting with . in their name that you can get info on, only in the terminal, using the  du -sh  command. If you have hundreds of them (which you do!) this becomes tedious. The following script gives you a directory listing with the files all indicated in file sizes and highlights on files of megabytes or gigabytes in size.  #!/bin/bash # Set Internal Field Separator to handle spaces in filenames IFS=$'\n' # Loop through all files and directories for i in $(/bin/ls -A); do        size=$(du -sh "$i" | awk '{print $1}')           # Apply colors: bold for MB, bright bold for GB      case "$size" in          *M) color="\e[1m" ;;         # Bold for Megabytes          *G) color="\e[1;97m" ;;      # Br...
Read more