Begin entrypoint rewrite

entrypoint.sh

@@ -11,9 +11,12 @@ else
     STAGING="--staging"
 fi
 
+# Try to get a certificate, accept failures
+while [ ! -f /etc/letsencrypt/live/${DOMAIN}/fullchain.pem ]; do
     certbot certonly --agree-tos --cert-name "${DOMAIN}" \
             --email "$EMAIL" --expand --non-interactive \
             --domain "$DOMAIN" --standalone $STAGING
+    sleep 60
 
     # Correct permissions for multi user container/pod deployments
     # if not indicated otherwise
@@ -21,3 +24,10 @@ if [ -z "$LEAVE_PERMISSIONS_AS_IS" ]; then
         find /etc/letsencrypt -type d -exec chmod 0755 {} \;
         find /etc/letsencrypt -type f -exec chmod 0644 {} \;
     fi
+done
+
+# Try to renew once per day
+while true; do
+    /usr/bin/certbot renew
+    sleep 86400
+done