Initial template: TLS cert expiry checker

config/cert-expiry.conf.example

@@ -0,0 +1,18 @@
+# Copy to config/cert-expiry.conf (gitignored)
+
+# Notification email settings (examples)
+RECIPIENT="alert@example.domain"
+SENDER="noreply@example.domain"
+
+# Check settings
+WARN_DAYS=30
+TIMEOUT=12
+FORCE_SEND=0
+
+# Files (defaults are repo-local, these are optional)
+DOMAINS_FILE="./config/domains.txt"
+LOG_FILE="./cert-expiry.log"
+
+# Email via msmtp (optional)
+ENABLE_EMAIL=0
+MSMTP_CONFIG="./config/msmtprc"

config/msmtprc.example

@@ -0,0 +1,13 @@
+# Copy to config/msmtprc (gitignored) and chmod 600
+
+defaults
+auth           on
+tls            on
+tls_trust_file /etc/ssl/certs/ca-certificates.crt
+
+account default
+host smtp.example.domain
+port 587
+from noreply@example.domain
+user noreply@example.domain
+password CHANGE_ME