About detecting cert modifications

wontell

Hey, I’m using my own certificates. If the cert files are modified (For example when they are renewed) does the apps (containers) automatically detect it and use the new cert files or I’m required to restart the containers?

As far as I can tell these are the containers that use the cert files:

dovecot-mailcow
postfix-mailcow
nginx-mailcow
acme-mailcow
watchdog-mailcow
dovecot-mailcow

Do I have to manually restart the containers when I renew the certificates?

Thank you!

DocFraggle

Yes. See https://docs.mailcow.email/post_installation/firststeps-ssl/#how-to-use-your-own-certificate

Here’s a script: https://docs.mailcow.email/post_installation/reverse-proxy/r_p/#optional-post-hook-script-for-non-mailcow-acme-clients

wontell

DocFraggle Thank you! In the example script I see it only restarts postfix, dovecot and nginx, I understand I won’t need to restart the acme container but what about watchdog?

DocFraggle

Why do you think watchdog uses the certificate?

wontell

DocFraggle It mounts the cert directory:

volumes:
        - rspamd-vol-1:/var/lib/rspamd
        - mysql-socket-vol-1:/var/run/mysqld/
        - postfix-vol-1:/var/spool/postfix
        - ./data/assets/ssl:/etc/ssl/mail/:ro,z

DocFraggle

Afaik you don’t need to restart watchdog