| 28 Jan 2025 |
@adam:robins.wtf | Let Encrypt is ending expiration emails. Since I rely on this in case automation is failing unexpectedly, I'd like an alternative. Any suggestions for something self hosted you like? | 19:21:14 |
magic_rb | openssl in a cron job with some regex? /partial s | 19:21:55 |
@adam:robins.wtf | sure, i could script something | 19:22:45 |
@adam:robins.wtf | though i wouldn't probably use openssl cli for it :) | 19:23:06 |
magic_rb | https://github.com/serokell/serokell.nix/blob/master/modules/acme-sh.nix im using this for automatic renewal | 19:23:46 |
dgrig | https://github.com/prometheus/blackbox_exporter is what's commonly used (but it assumes you have prometheus already and alertmanager setup) | 19:23:47 |
magic_rb | Well, my own fork in my dotfiles | 19:23:54 |
@adam:robins.wtf | i don't need the renewal itself. just monitoring of installed certs | 19:37:43 |
K900 | blackbox-exporter can do that | 19:38:02 |
K900 | But you do need a working LGTM stack for it to be nice | 19:38:16 |
K900 | Unless you're willing to raw dog Prometheus I guess | 19:38:31 |