# /etc/cron.d/cert: crontab entries for the certbot (letsencrypt)

SHELL=/bin/sh
PATH=/opt/certbot/bin:/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin

# Renew certs twice daily
0 0,12 * * * root test -x /opt/certbot/bin/certbot && test -L /usr/local/bin/certbot && perl -e 'sleep int(rand(43200))' && certbot -q renew --no-random-sleep-on-renew

# Upgrade certbot monthly
43  0  1  *  * root /opt/certbot/bin/pip install --upgrade --quiet pip
45  0  1  *  * root /opt/certbot/bin/pip install --upgrade --quiet certbot certbot-apache
# certbot-dns-powerdns, part of powerdns-tools
47  0  1  *  * root if [ -d /opt/certbot/lib/python3.11/site-packages/certbot_dns_powerdns ]; then /opt/certbot/bin/pip install --upgrade --quiet certbot-dns-powerdns pyyaml==5.3.1; fi