audit fixes: error handling, docs consistency, bucket idempotency

2026-03-20 11:28:36 -04:00
parent 6b1e78350f
commit be1ad6b456
8 changed files with 61 additions and 13 deletions
@@ -31,7 +31,7 @@ chmod +x /etc/letsencrypt/renewal-hooks/deploy/reload-nginx.sh
 if systemctl list-unit-files certbot-renew.timer 2>/dev/null | grep -q certbot-renew; then
    systemctl enable --now certbot-renew.timer
 else
-    echo "0 3 * * * root certbot renew --quiet" > /etc/cron.d/certbot-renew
+    echo "0 3 * * * root certbot renew --quiet --deploy-hook 'docker exec nginx nginx -s reload' 2>&1 | logger -t certbot" > /etc/cron.d/certbot-renew
 fi

 echo "==> Deploying services..."