On Wed, 2018-11-28 at 12:25 -0500, Viktor Dukhovni wrote: > > On Nov 28, 2018, at 9:49 AM, Jim P. <jim@postmaster.ninja> wrote: > > > > 1) What do you do about restarting services after automatic cert > > renewals in the middle of a holiday weekend? (i.e. renew_hook in > > /etc/letsencrypt/renewal/*.conf) > > There is no need to restart or even "reload" Postfix when certificates > change, unless you've left renewal too late, and are already or will > imminently be serving expired certificates. > > Most Postfix service processes, in particular all the ones that > make use of private keys and certificates, run for a limited > amount of time and are automatically replaced with newer processes > that use the latest settings.
Thanks for that point, that makes good sense. -Jim P.
signature.asc
Description: This is a digitally signed message part
