Alan Orth
0cd2735c82
Take an opinionated stance on HTTPS and assume that hosts are using HTTPS for all vhosts. This can either be via custom TLS cert/key pairs defined in the host's variables (could even be self-signed certificates on dev boxes) or via Let's Encrypt.
7 lines
205 B
Django/Jinja
7 lines
205 B
Django/Jinja
[Unit]
|
|
Description=Let's Encrypt renewal
|
|
|
|
[Service]
|
|
Type=oneshot
|
|
ExecStart={{ letsencrypt_certbot_dest }} renew --standalone --pre-hook "/bin/systemctl stop nginx" --post-hook "/bin/systemctl start nginx"
|