enhance: limit cert renewal interval between 7 to 21 days

0xJacky · Apr 30, 2024 · e3876cf · e3876cf
1 parent 49b41d6
commit e3876cf
Show file tree

Hide file tree

Showing 2 changed files with 11 additions and 1 deletion.
diff --git a/internal/cert/auto_cert.go b/internal/cert/auto_cert.go
@@ -60,7 +60,7 @@ func renew(certModel *model.Cert) {
 		notification.Error("Renew Certificate Error", strings.Join(certModel.Domains, ", "))
 		return
 	}
-	if int(time.Now().Sub(cert.NotBefore).Hours()/24) < settings.ServerSettings.CertRenewalInterval {
+	if int(time.Now().Sub(cert.NotBefore).Hours()/24) < settings.ServerSettings.GetCertRenewalInterval() {
 		// not after settings.ServerSettings.CertRenewalInterval, ignore
 		return
 	}

diff --git a/settings/server.go b/settings/server.go
@@ -33,6 +33,16 @@ func (s *Server) GetCADir() string {
 	return lego.LEDirectoryProduction
 }
 
+func (s *Server) GetCertRenewalInterval() int {
+	if s.CertRenewalInterval < 7 {
+		return 7
+	}
+	if s.CertRenewalInterval > 21 {
+		return 21
+	}
+	return s.CertRenewalInterval
+}
+
 var ServerSettings = Server{
 	HttpHost:            "0.0.0.0",
 	HttpPort:            "9000",