alanorth/ansible-personal
1
0
Fork 0
Code Issues 4 Pull Requests Projects Releases Wiki Activity

roles/nginx: Add sanity check to systemd service for renewing Let's Encrypt certs

Browse Source 
Just in case, we'd better make sure that certbot is installed and
usable (+x) before we try running it.
This commit is contained in:
Alan Orth 2016-08-17 12:27:33 +03:00
parent 2a78c5cf59
commit 60c498f5ae
Signed by: alanorth
GPG Key ID: 0FB860CC9C45B1B9
1 changed files with 1 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
roles/nginx/templates/renew-letsencrypt.service.j2
View File

@ -3,4 +3,5 @@ Description=Renew Let's Encrypt certificates
[Service] [Service]
Type=oneshot Type=oneshot
ConditionFileIsExecutable={{ letsencrypt_certbot_dest }}
ExecStart={{ letsencrypt_certbot_dest }} renew --standalone --pre-hook "/bin/systemctl stop nginx" --post-hook "/bin/systemctl start nginx" ExecStart={{ letsencrypt_certbot_dest }} renew --standalone --pre-hook "/bin/systemctl stop nginx" --post-hook "/bin/systemctl start nginx"