-- Persist non-secret ACME renewal observations so the dashboard is populated
-- immediately after a restart. Provider credentials remain outside SQLite.
CREATE TABLE IF NOT EXISTS certificate_renewals (
    certificate_id TEXT PRIMARY KEY,
    last_checked INTEGER NOT NULL DEFAULT 0,
    next_check INTEGER NOT NULL DEFAULT 0,
    last_renewed INTEGER,
    not_after INTEGER,
    failures INTEGER NOT NULL DEFAULT 0 CHECK (failures >= 0),
    status TEXT NOT NULL DEFAULT '',
    message TEXT NOT NULL DEFAULT ''
);