Update notes for 2016-05-06

content/2016-05.md

@@ -41,3 +41,30 @@ GET /rest/handle/10568/NaN?expand=parentCommunityList,metadata HTTP/1.1
 - Hmm, also disk space is full
 - I decided to blow away the solr indexes, since they are 50GB and we don't really need all the Atmire stuff there right now
 - I will re-generate the Discovery indexes after re-deploying
+- Testing `renew-letsencrypt.sh` script for nginx
+
+```
+#!/usr/bin/env bash
+
+readonly SERVICE_BIN=/usr/sbin/service
+readonly LETSENCRYPT_BIN=/opt/letsencrypt/letsencrypt-auto
+
+# stop nginx so LE can listen on port 443
+$SERVICE_BIN nginx stop
+
+$LETSENCRYPT_BIN renew -nvv --standalone --standalone-supported-challenges tls-sni-01 > /var/log/letsencrypt/renew.log 2>&1
+
+LE_RESULT=$?
+
+$SERVICE_BIN nginx start
+
+if [[ "$LE_RESULT" != 0 ]]; then
+    echo 'Automated renewal failed:'
+
+    cat /var/log/letsencrypt/renew.log
+
+    exit 1
+fi
+```
+
+- Seems to work well