From f608a2ef4e7dd888104624414c00abed00907d4d Mon Sep 17 00:00:00 2001
From: Jim Martens <github@2martens.de>
Date: Sat, 2 Aug 2025 22:12:49 +0200
Subject: [PATCH] feat: Add workflow to update nginx-proxy once a week to
 accommodate new certificates

---
 .github/workflows/certbot-update.yaml | 22 ++++++++++++++++++++++
 1 file changed, 22 insertions(+)
 create mode 100644 .github/workflows/certbot-update.yaml

diff --git a/.github/workflows/certbot-update.yaml b/.github/workflows/certbot-update.yaml
new file mode 100644
index 0000000..827585e
--- /dev/null
+++ b/.github/workflows/certbot-update.yaml
@@ -0,0 +1,22 @@
+name: certbot-update.yaml
+on:
+  schedule:
+    - cron: "0 3 * * 1"
+
+jobs:
+  renew-certs:
+    name: Update nginx
+    runs-on: ubuntu-latest
+    strategy:
+      matrix:
+        env: [ test ]
+    environment: ${{ matrix.env }}
+    steps:
+      - name: Update Nginx
+        uses: appleboy/ssh-action@v1
+        with:
+          host: ${{ secrets.DEPLOY_HOST }}
+          username: ${{ secrets.DEPLOY_USER }}
+          key: ${{ secrets.DEPLOY_KEY }}
+          script: |
+            docker service update --force nginx-proxy