- moved certbot into its own module - added fact to list available certificates - created systemd timer to rsync data to $data_dir/pub - ensure the $data_dir/pub exists - manage selinux for nginx
11 lines
222 B
Plaintext
11 lines
222 B
Plaintext
[Unit]
|
|
Description=certbot-syncer service
|
|
|
|
[Service]
|
|
Type=oneshot
|
|
ExecStart=/usr/bin/rsync --chmod=D2755,F644 -aL /etc/letsencrypt/live/ <%= $data_root %>/pub/
|
|
User=root
|
|
Group=root
|
|
PermissionsStartOnly=false
|
|
PrivateTmp=no
|