Auto Renew Cert SSL

[nam-nguyentu]

Hello,

This morning, I needed to renew my SSL certificate manually. Is this option enabled by default, or do I need to configure something in my .yml ? Here it is :

name: npmplus
services:
  npmplus:
    container_name: npmplus
    image: docker.io/zoeyvid/npmplus:latest # or ghcr.io/zoeyvid/npmplus:latest
    restart: unless-stopped
    network_mode: host
    ipc: host # required when you want to use the openappsec attachment module
    volumes:
      - "/opt/npmplus:/data"
      - "shm-volume:/dev/shm/check-point" # required if you want to use the openappsec attachment module, also enable this volume at the end of this compose.yaml
    environment:
      - "TZ=Europe/Paris" # set timezone, required, set it to one of the values from the "TZ identifier" https://en.wikipedia.org/wiki/List_of_tz_database_time_zones#List
      - "ACME_EMAIL=x@y.com" # email address to use for acme, optional for letsencrypt, but required for zerossl and google public ca
      - "DISABLE_IPV6=true" # fully disables listening on IPv6 and the IPv6 resolver of nginx, overrides IPV6_BINDING/NPM_IPV6_BINDING/GOA_IPV6_BINDING, default false
      - "DISABLE_HTTP=true" # prevents nginx from listening on port 80, default false
      - "LOGROTATIONS=7" # Set how often the access.log should be rotated until it is deleted, default 3
      - "NGINX_LOAD_OPENAPPSEC_ATTACHMENT_MODULE=true" # loads the openappsec attachment module, you must also set ipc and enable the shm-volume for NPMplus in this compose file, this will fully disable brotli, default false

Thank you !

[Zoey2936]

Certs auto-renew always, there is no way to enable/disable this. Did your cert expire?

[nam-nguyentu]

Hello Zoey,
All my certs expired again today.

[Zoey2936]

can you please retsart the container and post the full docker logs?

[nam-nguyentu]

can you please retsart the container and post the full docker logs?

Here it is : https://fromsmash.com/logs-npmplus

[Zoey2936]

looks like #3200

[nam-nguyentu]

looks like #3200

Just to confirm. So I need to change the tag to develop :

name: npmplus
services:
  npmplus:
    container_name: npmplus
    image: docker.io/zoeyvid/npmplus:develop

change REQUEST_TIMEOUT=5000 in "/opt/npmplus/crowdsec/crowdsec.conf"
and then re-pull the image to test ?

[Zoey2936]

for openappsec only the image part is relevant, the crowdsec thing is unrelated

[nam-nguyentu]

for openappsec only the image part is relevant, the crowdsec thing is unrelated

hello,
this works for me auto-renew after changing the tag to develop. Thank you !

[nicedevil007]

when openappsec get in trouble the certrenew works as expected but the database of npmplus wont get updatet so you see old dates in the webui instead of the real cert expiration date. There is a nginx -t command that runs indefinitly after renew when openappsec has a problem (and I never saw an installtion where it was running "flawless"..., no issue of @Zoey2936 imho).

Maybe you faced the same issue.