Skip to content

Instantly share code, notes, and snippets.

@lbehm
Created May 19, 2020 21:22
Show Gist options
  • Save lbehm/92ae6259d662a4441debde7c91bbe7cc to your computer and use it in GitHub Desktop.
Save lbehm/92ae6259d662a4441debde7c91bbe7cc to your computer and use it in GitHub Desktop.
dehydrated systemd service files
[Unit]
Description=letsencrypt/acme client implemented as a shell-script
After=network.target
[Service]
Type=oneshot
ExecStart=/usr/bin/dehydrated -c
ExecStartPost=!/bin/systemctl reload nginx.service
Restart=no
WorkingDirectory=/var/lib/dehydrated
ConfigurationDirectory=dehydrated
StateDirectory=dehydrated
ProtectSystem=full
DynamicUser=yes
NoNewPrivileges=true
ProtectHome=true
PrivateTmp=yes
UMask=007
[Unit]
Description=Checking certificates once a day
[Timer]
OnCalendar=daily
Persistent=true
RandomizedDelaySec=10800
[Install]
WantedBy=timers.target
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment