Mailu Frontend doesn't refresh certificate automatically #86

New issue

Open

opened 2022-06-20 13:32:46 +00:00 by graffen · 2 comments

graffen commented

2022-06-20 13:32:46 +00:00

Contributor

When the TLS Cert is updated by the reverse proxy, the mailu frontend container needs to be restarted. We need to find a way to do this automatically.

reynir commented

2022-06-23 10:07:28 +00:00

Owner

Relevant: https://mailu.io/master/maintain.html#managing-of-external-let-s-encrypt-certificates

samsapti commented

2022-06-23 20:03:50 +00:00

Owner

https://git.data.coop/data.coop/ansible/src/branch/master/roles/docker/tasks/services/mailu.yml#L25-L38

The TLS certificate and key files are hard-linked from nginx to Mailu. When nginx renews the cert, the modified-date of the hard-link is updated as well. This means that, if we can somehow have something to listen for the files (the hard-links) being modified on Mailu's side of things, this would be easily solvable.

https://git.data.coop/data.coop/ansible/src/branch/master/roles/docker/tasks/services/mailu.yml#L25-L38 The TLS certificate and key files are hard-linked from nginx to Mailu. When nginx renews the cert, the modified-date of the hard-link is updated as well. This means that, if we can somehow have something to listen for the files (the hard-links) being modified on Mailu's side of things, this would be easily solvable.