ansible-personal/roles/nginx/files/renew-letsencrypt.timer

[Unit]
Description=Renew Let's Encrypt certificates

[Timer]
# once a day, at 2AM
OnCalendar=*-*-* 02:00:00
# Add a random delay of 0–3600 seconds
RandomizedDelaySec=3600
Persistent=true

[Install]
WantedBy=timers.target
-												roles/nginx: Rework Let's Encrypt stuff

Take an opinionated stance on HTTPS and assume that hosts are using
HTTPS for all vhosts. This can either be via custom TLS cert/key
pairs defined in the host's variables (could even be self-signed
certificates on dev boxes) or via Let's Encrypt.

											
										
										
											2016-06-27 22:52:39 +02:00
+								[Unit]
-												roles/nginx: Better names for Let's Encrypt timer/service

											
										
										
											2016-07-07 13:36:29 +02:00
+								Description=Renew Let's Encrypt certificates
-												roles/nginx: Rework Let's Encrypt stuff

Take an opinionated stance on HTTPS and assume that hosts are using
HTTPS for all vhosts. This can either be via custom TLS cert/key
pairs defined in the host's variables (could even be self-signed
certificates on dev boxes) or via Let's Encrypt.

											
										
										
											2016-06-27 22:52:39 +02:00
 								[Timer]
-												roles/nginx: Only run Let's Encrypt checks once a day

I can't remember where I had seen it recommended to be twice a day,
but it seems overkill.

											
										
										
											2016-07-08 12:50:11 +02:00
+								# once a day, at 2AM
 								OnCalendar=*-*-* 02:00:00
-												roles/nginx: Rework Let's Encrypt stuff

Take an opinionated stance on HTTPS and assume that hosts are using
HTTPS for all vhosts. This can either be via custom TLS cert/key
pairs defined in the host's variables (could even be self-signed
certificates on dev boxes) or via Let's Encrypt.

											
										
										
											2016-06-27 22:52:39 +02:00
+								# Add a random delay of 0–3600 seconds
 								RandomizedDelaySec=3600
 								Persistent=true
 								[Install]
 								WantedBy=timers.target