lego icon indicating copy to clipboard operation
lego copied to clipboard

Renew only specified domains

Open SoniEx2 opened this issue 3 years ago • 4 comments

Welcome

  • [X] Yes, I've searched similar issues on GitHub and didn't find any.

How do you use lego?

Binary

Detailed Description

When using lego renew, one should be able to tell lego to only renew the specified domains, and drop any domains not specified.

This would make managing certs much easier as one'd be able to just use systemd for it, instead of remembering the run command and all that. Just add/remove -d's and call it a day, then run the renewal unit.

SoniEx2 avatar Nov 24 '21 01:11 SoniEx2

I'd like to second this - in NixOS' ACME module it was recently reported (NixOS/nixpkgs#147540) that removing a domain does not work as expected, for this reason.

I would also ask that if the list of domains differs from those specified on the CLI, and --days is also specified, that a renewal would be attempted regardless of expiry date for those domains specified. This avoids a hacky bit of scripting we did already to detect a change in the configured domains.

m1cr0man avatar Nov 26 '21 22:11 m1cr0man

Some days I wonder why we use lego instead of certbot... 😞

aanderse avatar Nov 27 '21 12:11 aanderse

@aanderse Some days I wonder why I spend my time creating and maintaining open-source projects... Please, there are humans behind open-source projects.

ldez avatar Nov 27 '21 14:11 ldez

@ldez I'm sorry. I actually intended that comment to be in the NixOS issue thread, not this one... but after some reflection I realize even in the NixOS issue thread it is still an inappropriate comment. You're right. I'm an open source contributor as well and it never feels nice when people leave comments like that based on your hard work. Please do accept my apologies - many people appreciate the work people put into this project, myself included.

aanderse avatar Nov 27 '21 14:11 aanderse