From 88ac4aaa46ed6ba85617a9cbeda160ccc818e075 Mon Sep 17 00:00:00 2001 From: Christoph Haas Date: Fri, 28 Nov 2025 16:27:54 +0100 Subject: [PATCH] keep existing records in cli.ini --- src/content/docs/ispmail-trixie/158-certbot.mdx | 12 +++++++++++- 1 file changed, 11 insertions(+), 1 deletion(-) diff --git a/src/content/docs/ispmail-trixie/158-certbot.mdx b/src/content/docs/ispmail-trixie/158-certbot.mdx index 59081d3..6a06987 100644 --- a/src/content/docs/ispmail-trixie/158-certbot.mdx +++ b/src/content/docs/ispmail-trixie/158-certbot.mdx @@ -109,7 +109,17 @@ It is important that services that use the certificate load the new certificate command will create a file `/etc/letsencrypt/cli.ini` that handles it: ```sh title="Run this on your server" -echo > /etc/letsencrypt/cli.ini "post-hook = systemctl reload postfix dovecot apache2" +cat > /etc/letsencrypt/cli.ini << 'EOF' +# Restart services after renewing a certificate +post-hook = systemctl reload postfix dovecot apache2 + +# Because we are using logrotate for greater flexibility, disable the +# internal certbot logrotation. +max-log-backups = 0 + +# Adjust interactive output regarding automated renewal +preconfigured-renewal = True +EOF ``` Perfect. You won't have to worry about the certificate again.