puppet-prod/modules/certbot/templates/certbot-syncer.service.epp
Ben Vincent bd5164fed3 feat: certbot reorg
- moved certbot into its own module
- added fact to list available certificates
- created systemd timer to rsync data to $data_dir/pub
- ensure the $data_dir/pub exists
- manage selinux for nginx
2024-07-08 22:33:11 +10:00

11 lines
222 B
Plaintext

[Unit]
Description=certbot-syncer service
[Service]
Type=oneshot
ExecStart=/usr/bin/rsync --chmod=D2755,F644 -aL /etc/letsencrypt/live/ <%= $data_root %>/pub/
User=root
Group=root
PermissionsStartOnly=false
PrivateTmp=no