Incident Runbooks

Step-by-step playbooks for when things go sideways. Interactive checklists with copy-paste commands.

SSL Certificate Expired — Emergency Renewal Checklist

Renew an expired or expiring SSL/TLS certificate. Covers Let's Encrypt/certbot renewal, manual certificate replacement, web server reload, and auto-renewal setup.

10 min7 steps

ssltlscertificatewebemergency

Let's Encrypt Renewal Failed — certbot Troubleshooting

Fix a certbot renewal that's stuck failing. Covers HTTP-01 + DNS-01 challenges, rate limits, webroot + authenticator mismatches, and getting the cert pushed to services that cached the old chain.

20 min7 steps

letsencryptcertbottlscertificaterenewalsecurity