mirror/ infrastructure
1
1
Fork 0
mirror of https://gitlab.archlinux.org/archlinux/infrastructure.git synced 2024-05-19 21:16:03 +02:00
Code Issues

certbot: Disable built-in random-sleep 

certbot by default sleep 1-480 seconds before renewing, to avoid all
people renewing at :00. In our case the logic is is unnecessary as
systemd is handling it (RandomizedDelaySec=24h).
This commit is contained in:
Kristian Klausen 2020-10-17 12:31:01 +02:00
parent 2d40f37f6d
commit b0d30dd475
1 changed files with 1 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
roles/certbot/files/certbot-renewal.service
View File

@ -4,6 +4,7 @@ Description=Let's Encrypt renewal
[Service]
Type=oneshot
ExecStart=/usr/bin/certbot renew --rsa-key-size 4096 \
--no-random-sleep-on-renew \
--pre-hook "/etc/letsencrypt/hook.sh pre" \
--post-hook "/etc/letsencrypt/hook.sh post" \
--renew-hook "/etc/letsencrypt/hook.sh renew"