certs.yaml

---
# `defaults` contains the default settings.
defaults:
  # The default TLS port to connect to.
  port: 443
  # By default, notification is sent when its TLS cert is expiring in
  # 35 days.
  notify_when_expiring_in: 35
  notifiers:
    ses:
      sender: noreply+1@example.com
      recipient: some.recipient.1@example.com
      aws_region: us-east-1
    irc:
      server: irc.example.com
      port: 6697
      # Don't forget the hash tag.
      channel: "#check_certs"
      nick: check_certs
      use_tls: True

sites:
  # For site1, notification is sent when its TLS cert is expiring in
  # 60 days.
  site1.domain.com:
    notify_when_expiring_in: 60

  # site2 uses the default settings.
  site2.domain.com:

  # site3 has different AWS SES notifier settings than the defaults.
  site3.domain.com:
    notifiers:
      ses:
        sender: noreply+2@example.com
        recipient: some.recipient.2@example.com

  # site4 uses the default settings except talking to the irc server on
  # a different port.
  site4.domain.com:
    notifiers:
      irc:
        port: 6665