FYI @plorenz The Linux router has default run params ziti router run config.yml --extend, and there was a recent bugfix for --extend because it was failing silently resulting in the router's leaf certs not being renewed at startup. I'm unsure if the problem extended to the default renewal timer, and I suspect it did also prevent that from succeeding.
@farmhouse If you decide it's necessary, the Linux router's run params can be influenced to disable cert renewal at startup by setting ZITI_ARGS.
# default value
❯ grep ZITI_ARGS /opt/openziti/etc/router/service.env
ZITI_ARGS='--extend'
# startup renewal disabled
❯ grep ZITI_ARGS /opt/openziti/etc/router/service.env
ZITI_ARGS=''