renew ssl certs automatically and clear out expired

 Letsencrypt used to auto fix your expired certs. This no longer happens. Here's a script to do it.

Flags:

--delete : remove expired certs

--renew: renew soon-to-expire certs (3< days)

#!/bin/bash
# check-certs.sh
base="/etc/letsencrypt/archive"
delete_mode=0
renew_mode=0
if [ "$1" == "--delete" ]; then
    delete_mode=1
elif [ "$1" == "--renew" ]; then
    renew_mode=1
fi
# First: find all current certs in archive
declare -A cert_status
find "$base" -type f -name "cert*.pem" | while read cert; do
    domain=$(echo "$cert" | sed -E "s|$base/([^/]+)/cert[0-9]+\.pem|\1|")
    expiry=$(openssl x509 -enddate -noout -in "$cert" | cut -d= -f2)
    exp_epoch=$(date -d "$expiry" +%s)
    now_epoch=$(date +%s)
    days_left=$(( (exp_epoch - now_epoch) / 86400 ))
    echo "$domain: $expiry  ($days_left days left)"
    if [ $delete_mode -eq 1 ] && [ $days_left -lt 0 ]; then
        echo "Deleting expired cert: $cert"
        rm -f "$cert"
    fi
    if [ $renew_mode -eq 1 ] && [ $days_left -le 3 ]; then
        echo "Renewing cert for $domain..."
        certbot certonly --webroot -w "/var/www/$domain" -d "$domain" -d "www.$domain" -m my@email.co.za --agree-tos --no-eff-email --non-interactive --quiet
    fi
    cert_status["$domain"]=1
done
if [ $renew_mode -eq 1 ]; then
    # Check apache configs for missing certs
    grep -h -R "ServerName" /etc/apache2/sites-enabled/ | awk '{print $2}' | while read domain; do
        if [ -z "${cert_status[$domain]}" ]; then
            echo "No cert found for $domain. Creating new cert..."
            certbot certonly --webroot -w "/var/www/$domain" -d "$domain" -d "www.$domain" -m my@email.co.za --agree-tos --no-eff-email --non-interactive --quiet
        fi
    done
fi

Popular posts from this blog

Automatically Fix Song Metadata and Filenames on Linux with Beets

 🎵 Automatically Fix Song Metadata and Filenames on Linux with Beets Tired of sorting through unknown MP3s with cryptic filenames like Track01.mp3? Sick of missing album info, incorrect genres, and zero cover art? Here's a clean way to batch-fix your music collection with open source tools — no manual editing required. ✅ What You’ll Use beets — the core tool that organizes, renames, and tags your music by matching against the MusicBrainz database. libchromaprint-tools — provides fpcalc, which generates audio fingerprints to identify unlabeled tracks. ffmpeg (optional) — used by beets for transcoding or embedded cover art processing. 🔧 Installation sudo apt update sudo apt install beets libchromaprint-tools ffmpeg 🚀 One Command to Organize It All beet import /path/to/your/music/ Beets will: Fingerprint each file Query MusicBrainz for metadata Rename files (e.g., Artist - Title.mp3) Write correct ID3/metadata tag Optionally move files into organized folders 📁 Example Output Your ...
Read more

throttle traffic on apache

sudo apt install apache2-utils sudo apt install libapache2-mod-evasive vi /etc/apache2/mods-enabled/evasive.conf service apache restart edit it and set values as per below or whatever else you like, the time quantities are seconds     DOSSiteInterval     1     DOSBlockingPeriod   10     #DOSLogDir           "/var/lock/mod_evasive"
Read more

script to show all files with disk usage sizes

Normally to get the disk usage of a folder you use get properties on the rightclick or similar. However there are hidden files starting with . in their name that you can get info on, only in the terminal, using the  du -sh  command. If you have hundreds of them (which you do!) this becomes tedious. The following script gives you a directory listing with the files all indicated in file sizes and highlights on files of megabytes or gigabytes in size.  #!/bin/bash # Set Internal Field Separator to handle spaces in filenames IFS=$'\n' # Loop through all files and directories for i in $(/bin/ls -A); do        size=$(du -sh "$i" | awk '{print $1}')           # Apply colors: bold for MB, bright bold for GB      case "$size" in          *M) color="\e[1m" ;;         # Bold for Megabytes          *G) color="\e[1;97m" ;;      # Br...
Read more