From c490ee867322690c713f0c2b037d3cc2a5b255f9 Mon Sep 17 00:00:00 2001 From: kappa Date: Sun, 8 Feb 2026 20:19:11 +0900 Subject: [PATCH] Change cert renewal period from 30 to 60 days after issuance acme.sh default --days is 30, which triggers renewal 60 days before expiry. Setting --days 60 aligns with the common practice of renewing 30 days before the 90-day certificate expires. Co-Authored-By: Claude Opus 4.6 --- haproxy_mcp/tools/certificates.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/haproxy_mcp/tools/certificates.py b/haproxy_mcp/tools/certificates.py index ec75f9d..6d6fefb 100644 --- a/haproxy_mcp/tools/certificates.py +++ b/haproxy_mcp/tools/certificates.py @@ -231,7 +231,7 @@ def _haproxy_issue_cert_impl(domain: str, wildcard: bool) -> str: cmd = [ACME_SH, "--issue", "--dns", "dns_cf", "-d", domain] if wildcard: cmd.extend(["-d", f"*.{domain}"]) - cmd.extend(["--reloadcmd", reload_cmd]) + cmd.extend(["--days", "60", "--reloadcmd", reload_cmd]) try: logger.info("Issuing certificate for %s", domain)