Dashboard down upon certificate renewel

[davidye007]

Certbot auto-renewed the certificate for trailtrends.outdoor.org on 1/15/2025. The expiration date for the certificate is 2/13/2025. Certbot auto-renews the certificate when there is less than 30 days before certificate expiry.

Once the certificate is renewed, the user nginx no longer has read access to the renewed certificate.

A temporary fix is manually changing the folder permission with the following command:

1. sudo chmod 644 /etc/letsencrypt/archive/trailtrends.outdoorrd.org/*

or

2. sudo chmod 644 /etc/letsencrypt/live/trailtrends.outdoorrd.org/*.pem

A permanent solution would allow nginx to having access to Certbot renewed certificates without manual intervention.

[davidye007]

Check out Slack thread for history/background on this issue.