Cron last day of the month
The cron expression 0 23 28-31 * * runs a job at 23:00, on days 28 through 31 of the month; a date guard in the command limits it to the last day of the month. The guard exits early on the other dates, so give the job's heartbeat monitor a period that matches the real schedule, not the cron expression.
| minute | hour | day of month | month | day of week |
|---|---|---|---|---|
| 0 | 23 | 28-31 | * | * |
Next runs (UTC)
- Wed 2026-10-28 23:00 UTC (+00:00) · in 16d 3h
- Thu 2026-10-29 23:00 UTC (+00:00) · in 17d 3h
- Fri 2026-10-30 23:00 UTC (+00:00) · in 18d 3h
- Sat 2026-10-31 23:00 UTC (+00:00) · in 19d 3h
- Sat 2026-11-28 23:00 UTC (+00:00) · in 47d 3h
- Sun 2026-11-29 23:00 UTC (+00:00) · in 48d 3h
- Mon 2026-11-30 23:00 UTC (+00:00) · in 49d 3h
- Mon 2026-12-28 23:00 UTC (+00:00) · in 77d 3h
- Tue 2026-12-29 23:00 UTC (+00:00) · in 78d 3h
- Wed 2026-12-30 23:00 UTC (+00:00) · in 79d 3h
These are the times cron wakes up; the guard in the command then decides whether the job actually runs.
Notes for this schedule
L is Quartz-only). Schedule on days 28-31 and let the command check that tomorrow is the 1st.date -d tomorrow is GNU date (Linux). On macOS/BSD use date -v+1d +\%d.*-*~01 means the last day of every month.Examples
0 23 28-31 * * if [ "$(date -d tomorrow +\%d)" = 01 ]; then /usr/local/bin/my-job.sh; fi && curl -fsS -m 10 --retry 3 -o /dev/null https://puzaricloud.in/ping/<your-token>
# /etc/systemd/system/my-job.timer [Unit] Description=Run my-job (last day of the month) [Timer] OnCalendar=*-*~01 23:00:00 Persistent=true [Install] WantedBy=timers.target
# /etc/systemd/system/my-job.service [Unit] Description=my-job [Service] Type=oneshot ExecStart=/usr/local/bin/my-job.sh # runs only if ExecStart succeeded ExecStartPost=/usr/bin/curl -fsS -m 10 --retry 3 -o /dev/null https://puzaricloud.in/ping/<your-token>
Check the calendar spec with systemd-analyze calendar "*-*~01 23:00:00", then systemctl enable --now my-job.timer. Persistent=true runs a missed job at boot.
apiVersion: batch/v1
kind: CronJob
metadata:
name: my-job
spec:
schedule: "0 23 28-31 * *"
timeZone: "Etc/UTC" # Kubernetes 1.27+; otherwise the controller's timezone
concurrencyPolicy: Forbid # don't start a new run while one is active
startingDeadlineSeconds: 300 # still start if the controller was briefly down
jobTemplate:
spec:
backoffLimit: 2
template:
spec:
restartPolicy: OnFailure
containers:
- name: job
image: your-image:tag
command: ["/bin/sh", "-c", "if [ \"$(date -d tomorrow +%d)\" = 01 ]; then /app/run-job.sh; fi && curl -fsS -m 10 --retry 3 -o /dev/null https://puzaricloud.in/ping/<your-token>"]
on:
schedule:
- cron: "0 23 28-31 * *" # always evaluated in UTC
workflow_dispatch: {} # lets you run it by hand too
jobs:
run:
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v4
- run: "if [ \"$(date -d tomorrow +%d)\" = 01 ]; then ./run-job.sh; fi"
- name: Tell Vigil the job ran
if: success()
run: curl -fsS -m 10 --retry 3 -o /dev/null https://puzaricloud.in/ping/${{ secrets.VIGIL_PING_TOKEN }}
GitHub runs schedules in UTC, can delay them at busy times, and disables scheduled workflows in public repos after 60 days without activity.
Common mistakes
timedatectl or date. cronie (RHEL, Fedora, Arch) accepts CRON_TZ=Asia/Kolkata at the top of a crontab; Debian/Ubuntu cron does not.0 0 13 * 5 runs on every 13th and every Friday, not only on Friday the 13th.% is turned into a newline (everything after it goes to the command's stdin). Write date +\%F, not date +%F.PATH (often just /usr/bin:/bin), no login shell and no .bashrc. Use absolute paths and set variables at the top of the crontab.How to get alerted when it doesn't run
A cron job that stops running looks exactly like one that's working: no errors, no output. The reliable fix is a heartbeat (dead man's switch): the job pings a URL each time it finishes, and the monitor alerts you when a ping is late.
- Create a heartbeat in Vigil and choose cron schedule: 0 23 28-31 * *, timezone of your server.
- Set a grace period of about 60 minutes: long enough for a normal run to finish, short enough that you hear about it quickly.
- Add the ping to the end of the command (above). && means only successful runs ping; use /ping/<token>/$? to report the exit code, and /start to catch jobs that hang.
With the native systemd timer the ping only arrives on the last day itself, so give that heartbeat a fixed period of 31 days and a 1-day grace instead of the cron expression.
Vigil tells you when a run is missed
Vigil heartbeats understand cron expressions and timezones, so they know exactly when each run is due. Missed, failed or stuck runs alert you on email, Slack, Telegram, Discord or a webhook, and the history shows every run's duration.