Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

ACME certificates are not being renewed (missing task?) #59

Open
codersaur opened this issue Dec 17, 2024 · 5 comments · May be fixed by #60
Open

ACME certificates are not being renewed (missing task?) #59

codersaur opened this issue Dec 17, 2024 · 5 comments · May be fixed by #60

Comments

@codersaur
Copy link

I've configured an ACME certificate provider on my containerised PBS instance. It all works if I manually click the "Order Certificates Now" button and I have a valid cert for a week. However I have noticed that the ACME certs are not being automatically renewed.

Comparing the logs to a native install of PBS, it looks to me that the 'proxmox-backup-daily-update' service will normally run early morning and take care of renewing certificates, however on the containerised instance of PBS the 'proxmox-backup-daily-update' service does not appear to run (which would make sense if the only thing it did was check for updates).

@ayufan: Can you either enable the proxmox-backup-daily-update service, or possibly a better option, would be to define a new daily task that just renews any acme certs?

@ayufan
Copy link
Owner

ayufan commented Dec 17, 2024

Interesting, it might mean that we need cron to run. Will check.

@codersaur
Copy link
Author

Interesting, it might mean that we need cron to run. Will check.

All the other Sync/Prune/GC tasks run as normal. What triggers them?

@ayufan
Copy link
Owner

ayufan commented Dec 17, 2024

Daemon.

@codersaur
Copy link
Author

FYI, as a workaround, I have configured a deck-chores task which runs proxmox-backup-manager acme cert order inside the PBS container each night. Deck-chores is similar to Ofelia, a docker-aware job scheduler.

@ayufan
Copy link
Owner

ayufan commented Dec 17, 2024

Better run the /usr/lib/aarch64-linux-gnu/proxmox-backup/proxmox-daily-update daily for now.

@ayufan ayufan linked a pull request Dec 17, 2024 that will close this issue
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging a pull request may close this issue.

2 participants