Revoke old certs in a separated script

We cannot call letsencrypt.sh from a hook script, as there's a lock file

root/etc/e-smith/templates.metadata/etc/cron.daily/letsencrypt.sh

@@ -0,0 +1 @@
+PERMS=0755

root/etc/e-smith/templates/etc/cron.daily/letsencrypt.sh/10All

@@ -0,0 +1,10 @@
+{
+
+if (($letsencrypt{'status'} || 'disabled') eq 'enabled'){
+  $OUT .= "/usr/bin/letsencrypt.sh -c 2>&1 | 2>&1 | awk '{ print strftime(), $0; fflush(); }' >> /var/log/letsencrypt.sh.log\n";
+  if (($letsencrypt{'RevokeOldCertificates'} || 'disabled') =~ m/^enabled|on|yes|1$/){
+    $OUT .= "/usr/bin/le_revoke.sh 2>&1 | 2>&1 | awk '{ print strftime(), $0; fflush(); }' >> /var/log/letsencrypt.sh.log\n";
+  }
+}
+
+}

root/etc/e-smith/templates/etc/crontab/80letsencrypt

@@ -1,13 +0,0 @@
-{
-
-my $le = $letsencrypt{'status'} || 'disabled';
-
-if ($le eq 'enabled'){
-  $OUT .= '# Letsencrypt renewal' . "\n";
-  $OUT .= '2 4 * * * root sleep $[ $RANDOM \% 3600 ]; /usr/bin/letsencrypt.sh -c >> /var/log/letsencrypt.sh.log 2>&1' . "\n";
-}
-else{
-  $OUT .= '# Letsencrypt is disabled' . "\n";
-}
-
-}

root/etc/letsencrypt.sh/hooks_deploy_cert.d/10smeserver.sh

@@ -45,10 +45,3 @@ else
     /usr/bin/sv 1 /service/imaps
   fi
 fi
-# Now revoke old certificates
-CUR_CRT=$(readlink /home/e-smith/db/letsencrypt.sh/certs/$DOM/cert.pem)
-for cert in $(find /home/e-smith/db/letsencrypt.sh/certs/$DOM/ -type f -name cert\*.pem -exec basename "{}" \;); do
-  if [[ "$cert" != "$CUR_CRT" ]]; then
-    /usr/bin/letsencrypt.sh -r /home/e-smith/db/letsencrypt.sh/certs/$DOM/$cert
-  fi
-done