ansible-personal/roles/nginx/templates/renew-letsencrypt.service.j2

[Unit]
Description=Renew Let's Encrypt certificates
ConditionFileIsExecutable={{ letsencrypt_certbot_dest }}

[Service]
Type=oneshot
ExecStart={{ letsencrypt_certbot_dest }} renew --standalone --pre-hook "/bin/systemctl stop nginx" --post-hook "/bin/systemctl start nginx"
roles/nginx: Rework Let's Encrypt stuff Take an opinionated stance on HTTPS and assume that hosts are using HTTPS for all vhosts. This can either be via custom TLS cert/key pairs defined in the host's variables (could even be self-signed certificates on dev boxes) or via Let's Encrypt. 2016-06-27 22:52:39 +02:00			`[Unit]`
roles/nginx: Better names for Let's Encrypt timer/service 2016-07-07 13:36:29 +02:00			`Description=Renew Let's Encrypt certificates`
roles/nginx: Fix systemd unit for renewing Let's Encrypt certs The `ConditionFileIsExecutable` goes in the [Unit] section! This fixes the error: systemd[1]: [/etc/systemd/system/renew-letsencrypt.service:6] Unknown lvalue 'ConditionFileIsExecutable' in section 'Service' 2016-09-25 14:55:45 +02:00			`ConditionFileIsExecutable={{ letsencrypt_certbot_dest }}`
roles/nginx: Rework Let's Encrypt stuff Take an opinionated stance on HTTPS and assume that hosts are using HTTPS for all vhosts. This can either be via custom TLS cert/key pairs defined in the host's variables (could even be self-signed certificates on dev boxes) or via Let's Encrypt. 2016-06-27 22:52:39 +02:00
			`[Service]`
			`Type=oneshot`
			`ExecStart={{ letsencrypt_certbot_dest }} renew --standalone --pre-hook "/bin/systemctl stop nginx" --post-hook "/bin/systemctl start nginx"`