Certificates, operations and alerts
Find the certificates your web servers serve in the one Certificates list, review the history of every operation run on them, and understand the web server alerts.
Website certificates
The TLS certificates your web servers serve are in the one certificate list, Infrastructure > Certificates (in the Domains and certificates group), beside the domain, device and other certificates Tenvara checks. Choose Website in the Source row to see only these: soonest to expire first, with where each is used, the website or server it belongs to, the customer and the issuer. Renew on a row renews a certificate Tenvara issued straight away, and the overview's Certificates tile counts those expiring within 14 days.
A website certificate comes from one of three places:
- Issued by Tenvara: issued through certbot (or win-acme on Windows) by Tenvara, and renewed automatically from 30 days before expiry (the number of days is in Settings > Infrastructure).
- Uploaded: pasted in on the site's Domains and TLS tab. Not renewed automatically.
- Other: found on the server, issued some other way. Renew it wherever it came from, or issue one from Tenvara.
See Every certificate in one list for the list, its filters and views.
Operations
Everything run on a web server from Tenvara is an operation: creating a site, issuing a certificate, a deploy, a backup, reading a log, checking WordPress, restarting a service. The Web server operations tab of Infrastructure > Web servers lists them all (the page heading is Operations): when, what, the site, the server, the kind, who asked and how it went. Open it from that tab, with All operations on a web server's page, or from the Failed tile on the Infrastructure overview, which opens it filtered to what failed. Filter by Status and Kind.
Click an operation to see its steps, its output (deploy scripts, certbot and wp-cli output is kept, up to 256 KB) and the error if it failed. An operation still waiting for the agent can be cancelled.
Each site's Operations tab and each server's Recent operations show the same history for that site or server.
Passwords the server generates (database, SFTP, basic authentication, WordPress) never appear in an operation. They are returned once, stored encrypted, and removed from the operation record.
Web server alerts
Web server alerts appear in Alerts with the source Infrastructure and follow your alert rules like any other alert.
| Alert | Severity | Raised when | Clears when |
|---|---|---|---|
| Certificate expiring | Warning within 14 days, critical within 3 days or expired | A certificate a site uses is close to expiry | It is renewed or no longer used |
| Certificate renewal failed | Warning, critical under 7 days left | Issuing or renewing failed | The next success |
| Site not answering | Critical | The site's primary domain has not answered in two reports in a row, for at least 5 minutes | It answers |
| Service stopped | Critical for the web server, PHP-FPM and the database; warning for others | A service is stopped or failed | It runs |
| Disk filling up | Warning over 85%, critical over 95% | A disk on the server is that full | Under 85% |
| Backup failed | Warning | A site's last backup failed | The next good backup |
| Backup missed | Warning | No good backup within twice the schedule's interval | A good backup |
| Site gone | Warning | A site Tenvara created is no longer in the server's reports | It is reported again, or deleted in Tenvara |
| Operation failed | Warning | An operation failed (not a cancelled one) | The same operation succeeds |
Related
Was this page helpful?
Thanks for the feedback.