

Technically my renews aren’t automated. I have a nightly cronjob that should renew certificates and restart services, but when the certificates need renewal, it always fails because it wants to open a port I’m already using in order to answer the challenge.
I hear there’s an apache module / configuration I can use, but I never got around to setting it up. So, when the cron job fails, I get an email and go run a script that stops apache, renews certs, and restarts services (including apache). I will be a bit annoying to have to do that more often, but maybe it’ll help motivate me to configure apache (or whatever) correctly.
Debian Stable
It does have access to the HTTP root directories. But, it still can’t open port 80/443 when apache already has that port open.
EDIT: I guess my
certbot renewjust needs to be reconfigured to use a--webroot, so it doesn’t try to listen on it’s own.