Function start_certbot_task

gateway/src/main_service.rs:525–554

Start periodic certificate renewal task for multi-domain certbot

(proxy: Proxy)

/// Start periodic certificate renewal task for multi-domain certbot
async fn start_certbot_task(proxy: Proxy) {
    info!("starting certificate renewal task");

    // Periodic renewal task for all domains
    tokio::spawn(async move {
        // Run once at startup to check for any pending renewals
        info!("running initial certificate renewal check");
        if let Err(err) = proxy.renew_cert(None, false).await {
            error!("failed initial certificate renewal: {err:?}");
        }

        loop {
            // Get current config from KV store (allows dynamic updates)
            let renew_interval = proxy.kv_store.get_certbot_config().renew_interval;
            if renew_interval.is_zero() {
                // Check again later if disabled
                tokio::time::sleep(Duration::from_secs(60)).await;
                continue;
            }

            // Wait for the interval
            tokio::time::sleep(renew_interval).await;

            // Renew certificates
            if let Err(err) = proxy.renew_cert(None, false).await {
                error!("failed to renew certificates: {err:?}");
            }
        }
    });
}

/// Watch for certificate changes from KvStore and update CertStore
fn start_cert_store_watch_task(proxy: Proxy) {