ansible-personal/roles/nginx/templates/renew-letsencrypt.service.j2

[Unit]
Description=Renew Let's Encrypt certificates

[Service]
Type=oneshot
ConditionFileIsExecutable={{ letsencrypt_certbot_dest }}
ExecStart={{ letsencrypt_certbot_dest }} renew --standalone --pre-hook "/bin/systemctl stop nginx" --post-hook "/bin/systemctl start nginx"
roles/nginx: Rework Let's Encrypt stuff Take an opinionated stance on HTTPS and assume that hosts are using HTTPS for all vhosts. This can either be via custom TLS cert/key pairs defined in the host's variables (could even be self-signed certificates on dev boxes) or via Let's Encrypt. 2016-06-27 22:52:39 +02:00			`[Unit]`
roles/nginx: Better names for Let's Encrypt timer/service 2016-07-07 13:36:29 +02:00			`Description=Renew Let's Encrypt certificates`
roles/nginx: Rework Let's Encrypt stuff Take an opinionated stance on HTTPS and assume that hosts are using HTTPS for all vhosts. This can either be via custom TLS cert/key pairs defined in the host's variables (could even be self-signed certificates on dev boxes) or via Let's Encrypt. 2016-06-27 22:52:39 +02:00
			`[Service]`
			`Type=oneshot`
roles/nginx: Add sanity check to systemd service for renewing Let's Encrypt certs Just in case, we'd better make sure that certbot is installed and usable (+x) before we try running it. 2016-08-17 11:27:33 +02:00			`ConditionFileIsExecutable={{ letsencrypt_certbot_dest }}`
roles/nginx: Rework Let's Encrypt stuff Take an opinionated stance on HTTPS and assume that hosts are using HTTPS for all vhosts. This can either be via custom TLS cert/key pairs defined in the host's variables (could even be self-signed certificates on dev boxes) or via Let's Encrypt. 2016-06-27 22:52:39 +02:00			`ExecStart={{ letsencrypt_certbot_dest }} renew --standalone --pre-hook "/bin/systemctl stop nginx" --post-hook "/bin/systemctl start nginx"`