On Sep 8, 2017, at 07:56, Darac Marjal mailinglist@darac.org.uk wrote:
#!/bin/bash
set -e set -u set -o pipefail
if [[ ${1} == "deploy_cert" && ${2} == "mail.darac.org.uk" ]]; then echo " + Hook: Restarting Dovecot..." /usr/sbin/service dovecot restart fi
That means that dovecot will be restarted only if the certificate for the mail server is being deployed. If dehydrated runs, but fails to renew the certificate, then dovecot won't be restarted. Similarly, if it renews a different certificate, dovecot won't be restarted.
That is a great solution, but I think it’s probably easier to just kick dovecot once a month.
4 4 4 * * service dovecot restart
However, it seems like checking the certs is something that dovecot should be doing on its own.
-- This is my signature. There are many like it, but this one is mine.