TLS certificate pack template

Which names a certificate covers, when it expires and how to renew it.

Open in playground

Adds #tls-cert to the browser demo. No account.

Keys

domains: example.com www.example.com
issuer: Let's Encrypt
expires:date: 2027-01-15
renew_cmd:command: certbot renew --cert-name example.com

Example values. Rename, add or remove keys after you create the pack.

In a task

renew #tls-cert before it expires @2027-01-08 !2

In the terminal

$ tsk env tls-cert
DOMAINS='example.com www.example.com'
ISSUER="Let's Encrypt"
EXPIRES=2027-01-15
RENEW_CMD='certbot renew --cert-name example.com'

The real tsk decrypts secrets on your machine and prints them.

Automatic renewal works until it does not. This template keeps the names a certificate covers, its expiry date and the exact command to renew it by hand, so the fix is ready when the alert fires.

tsk get tls-cert.renew_cmd
tsk get tls-cert.expires

The playground opens with a certificate that expires in twelve days and a task to renew it a week before, to show how a date field and a due date work together.

All templates

TLS certificate pack template

Keys

In a task

In the terminal

Join the waitlist