From acc4cdb47d70491d2e524f7ae72114f286296eda Mon Sep 17 00:00:00 2001 From: Christian Heller Date: Wed, 5 Dec 2018 01:54:23 +0100 Subject: [PATCH] Replace unused certbot cronjob with used systemd service. --- .../linkable_etc_files/web/etc/cron.d/certbot | 13 ------------- .../web/etc/systemd/system/certbot.service | 8 ++++++++ 2 files changed, 8 insertions(+), 13 deletions(-) delete mode 100644 all_new_2018/linkable_etc_files/web/etc/cron.d/certbot create mode 100644 all_new_2018/linkable_etc_files/web/etc/systemd/system/certbot.service diff --git a/all_new_2018/linkable_etc_files/web/etc/cron.d/certbot b/all_new_2018/linkable_etc_files/web/etc/cron.d/certbot deleted file mode 100644 index e70c4fa..0000000 --- a/all_new_2018/linkable_etc_files/web/etc/cron.d/certbot +++ /dev/null @@ -1,13 +0,0 @@ -# /etc/cron.d/certbot: crontab entries for the certbot package -# -# Upstream recommends attempting renewal twice a day -# -# Eventually, this will be an opportunity to validate certificates -# haven't been revoked, etc. Renewal will only occur if expiration -# is within 30 days. -SHELL=/bin/sh -PATH=/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin - -# plomlompom added the --webroot -w /var/www/html/ so that renewal -# works with nginx running. -0 */12 * * * root test -x /usr/bin/certbot -a \! -d /run/systemd/system && perl -e 'sleep int(rand(3600))' && certbot -q renew --webroot -w /var/www/html/ diff --git a/all_new_2018/linkable_etc_files/web/etc/systemd/system/certbot.service b/all_new_2018/linkable_etc_files/web/etc/systemd/system/certbot.service new file mode 100644 index 0000000..122e7c1 --- /dev/null +++ b/all_new_2018/linkable_etc_files/web/etc/systemd/system/certbot.service @@ -0,0 +1,8 @@ +[Unit] +Description=Certbot +Documentation=file:///usr/share/doc/python-certbot-doc/html/index.html +Documentation=https://letsencrypt.readthedocs.io/en/latest/ +[Service] +Type=oneshot +ExecStart=/usr/bin/certbot -q renew --webroot -w /var/www/html/ +PrivateTmp=true -- 2.30.2