{"action":"created","issue":{"url":"https://api.github.com/repos/appsembler/roles/issues/26","repository_url":"https://api.github.com/repos/appsembler/roles","labels_url":"https://api.github.com/repos/appsembler/roles/issues/26/labels{/name}","comments_url":"https://api.github.com/repos/appsembler/roles/issues/26/comments","events_url":"https://api.github.com/repos/appsembler/roles/issues/26/events","html_url":"https://github.com/appsembler/roles/pull/26","id":292998415,"number":26,"title":"Make our own certbot cronjob since Ubuntu 16 Aptitude package version won't work with certonly param","user":{"login":"bryanlandia","id":1289191,"avatar_url":"https://avatars1.githubusercontent.com/u/1289191?v=4","gravatar_id":"","url":"https://api.github.com/users/bryanlandia","html_url":"https://github.com/bryanlandia","followers_url":"https://api.github.com/users/bryanlandia/followers","following_url":"https://api.github.com/users/bryanlandia/following{/other_user}","gists_url":"https://api.github.com/users/bryanlandia/gists{/gist_id}","starred_url":"https://api.github.com/users/bryanlandia/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/bryanlandia/subscriptions","organizations_url":"https://api.github.com/users/bryanlandia/orgs","repos_url":"https://api.github.com/users/bryanlandia/repos","events_url":"https://api.github.com/users/bryanlandia/events{/privacy}","received_events_url":"https://api.github.com/users/bryanlandia/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":8,"created_at":"2018-01-31T01:21:09Z","updated_at":"2018-02-12T18:47:55Z","closed_at":null,"author_association":"NONE","pull_request":{"url":"https://api.github.com/repos/appsembler/roles/pulls/26","html_url":"https://github.com/appsembler/roles/pull/26","diff_url":"https://github.com/appsembler/roles/pull/26.diff","patch_url":"https://github.com/appsembler/roles/pull/26.patch"},"body":"The cron entry installed by the Aptitude package doesn't work for our application, so this creates a `letsencrypt` cron job via Ansible.  As far as I know, none of our auto-renew was working, except at least DHIS2 was trying and that's because I _had_ to make our own cron job since Ubuntu 12 didn't have a certbot package\r\n\r\nThis was the output from what the Apt package installed, and a test using it:\r\n```\r\nroot@staging-isc-intersystems-edxapp-0:/home/bryan# sudo cat /etc/cron.d/certbot \r\n# /etc/cron.d/certbot: crontab entries for the certbot package\r\n#\r\n# Upstream recommends attempting renewal twice a day\r\n#\r\n# Eventually, this will be an opportunity to validate certificates\r\n# haven't been revoked, etc.  Renewal will only occur if expiration\r\n# is within 30 days.\r\nSHELL=/bin/sh\r\nPATH=/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin\r\n\r\n0 */12 * * * root test -x /usr/bin/certbot -a \\! -d /run/systemd/system && perl -e 'sleep int(rand(3600))' && certbot -q renew\r\n\r\nroot@staging-isc-intersystems-edxapp-0:/home/bryan# /usr/bin/certbot -a \\! -d /run/systemd/system && perl -e 'sleep int(rand(3600))' && certbot -q renew\r\nSaving debug log to /var/log/letsencrypt/letsencrypt.log\r\nCertbot doesn't know how to automatically configure the web server on this system. However, it can still get a certificate for you. Please run \"certbot certonly\" to do so. You'll need to manually configure your web server to use the resulting certificate.\r\n```\r\n\r\n\r\n\r\n"},"comment":{"url":"https://api.github.com/repos/appsembler/roles/issues/comments/365022679","html_url":"https://github.com/appsembler/roles/pull/26#issuecomment-365022679","issue_url":"https://api.github.com/repos/appsembler/roles/issues/26","id":365022679,"user":{"login":"bryanlandia","id":1289191,"avatar_url":"https://avatars1.githubusercontent.com/u/1289191?v=4","gravatar_id":"","url":"https://api.github.com/users/bryanlandia","html_url":"https://github.com/bryanlandia","followers_url":"https://api.github.com/users/bryanlandia/followers","following_url":"https://api.github.com/users/bryanlandia/following{/other_user}","gists_url":"https://api.github.com/users/bryanlandia/gists{/gist_id}","starred_url":"https://api.github.com/users/bryanlandia/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/bryanlandia/subscriptions","organizations_url":"https://api.github.com/users/bryanlandia/orgs","repos_url":"https://api.github.com/users/bryanlandia/repos","events_url":"https://api.github.com/users/bryanlandia/events{/privacy}","received_events_url":"https://api.github.com/users/bryanlandia/received_events","type":"User","site_admin":false},"created_at":"2018-02-12T18:47:55Z","updated_at":"2018-02-12T18:47:55Z","author_association":"NONE","body":"@thraxil Thanks Anders.  Basic and Pro customer deployments have a single Nginx instance on the edxapp server (has the LMS and CMS).  Enterprise customer deploys will have an additional Nginx for each edxapp server.  The Ansible role that sets this up is in https://github.com/appsembler/roles.  As mentioned above, the cronjob installed as part of the ubuntu 16 Apt. package doesn't work with our current setup.  I'm in favor of switching from `certonly`/`webroot` to using the Nginx plugin.  Thanks for taking a look.  cc @OmarIthawi @amirtds @tkeemon "}}
{"actor":{"display_login":"bryanlandia"}}