Added header to certificate renewal instructions to separate it from the Alternate Method section and make it clear that it is needed regardless of which method you use.

rcork 2017-10-18 21:13:19 -07:00
parent 746f4ac3d9
commit 4564368556
1 changed files with 3 additions and 1 deletions

@ -57,6 +57,8 @@ Please note that this will replace your Synology NAS system default certificate
Now you can check the DSM control panel - Security - Certificates to see the nominated certificate has been replaced by letsencrypt one. You can now configure to use this one as default and assign to specific services, like vpn, sftp, etc.
## Configuring Certificate Renewal
To auto renew the certificates in the future, you need to configure the cronjob. However, acme.sh seems not properly add tasks to Synology crontab. You have to do this manually.
Configure crontab for root
@ -68,7 +70,7 @@ For example, 10:00 am of the 2nd day every month run the cronjob to check if due
0 10 2 * * root /usr/local/share/acme.sh/acme.sh --cron --home /usr/local/share/acme.sh/
The last step is to setup a schedule task to copy renewed certificates in cert library to system default directory and restart the Nginx service.
If using the alternate method from above, the last step is to setup a schedule task to copy renewed certificates in cert library to system default directory and restart the Nginx service.
In DSM control panel, open the 'Task Scheduler' and create a new scheduled task for a user-defined script.