Renew cert with certbot / nginx

certrenew.sh

echo $DOMAINNAME

# Get cert expire info
EXPDATE=$(echo | openssl s_client -servername $DOMAINNAME -connect $DOMAINNAME:443 2>/dev/null | openssl x509 -noout -enddate)
EXPDATE2=${EXPDATE[@]:9}
FMTDATE=$(date --date="$EXPDATE2" "+%Y-%m-%d %H:%M:%S")

# Cert expire time
EXPTIME=$(date --date="$EXPDATE2" +%s)
EXPDAYS=$(($EXPTIME / 86400))

# Current time
CURTIME=$(date -u +%s)
CURDAYS=$(($CURTIME / 86400))

# Remaining days
REMDAYS=$(($EXPDAYS - $CURDAYS))
echo "$DOMAINNAME Expires $FMTDATE - In $REMDAYS Days"

# Don't renew before 25 days
if [[ 25 -lt $REMDAYS ]]; then
    echo 'Not renewing cert at this time'
    exit 0
fi

# Only renew between 4 and 10 GMT
CURHOUR=$(date -u +%-H)
if [[ 4 -gt $CURHOUR ]] || [[ 10 -lt $CURHOUR ]]; then
    echo "Only renewing cert between 4h and 10h GMT, Currently ${CURHOUR}h"
    exit 0
fi

echo '!!! Renewing cert !!!'

# Renew certificate
systemctl stop nginx
sleep 3
/usr/bin/certbot renew
sleep 3
systemctl start nginx