mirror of
https://gitlab.archlinux.org/archlinux/infrastructure.git
synced 2025-01-18 08:06:16 +01:00
b0d30dd475
certbot by default sleep 1-480 seconds before renewing, to avoid all people renewing at :00. In our case the logic is is unnecessary as systemd is handling it (RandomizedDelaySec=24h).
11 lines
313 B
SYSTEMD
11 lines
313 B
SYSTEMD
[Unit]
|
|
Description=Let's Encrypt renewal
|
|
|
|
[Service]
|
|
Type=oneshot
|
|
ExecStart=/usr/bin/certbot renew --rsa-key-size 4096 \
|
|
--no-random-sleep-on-renew \
|
|
--pre-hook "/etc/letsencrypt/hook.sh pre" \
|
|
--post-hook "/etc/letsencrypt/hook.sh post" \
|
|
--renew-hook "/etc/letsencrypt/hook.sh renew"
|