dachxy/nix-conf
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

fix: certbot force renew

Browse source
This commit is contained in:
DACHXY 2025-05-07 12:34:20 +08:00
parent 3a0bd5f83a
commit 6170ff2c1e
1 changed files with 2 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

5
system/modules/certbot.nix
View file

@ -4,9 +4,8 @@
enable = true;
description = "certbot renew";
timerConfig = {
OnCalendar = "*-*-* 03:00:00";
Persistent = true;
OnUnitActiveSec = "1d";
OnCalendar = "*-*-* 03:00:00";
Unit = "certbot-renew.service";
};
wantedBy = [ "timers.target" ];
@ -22,7 +21,7 @@
"REQUESTS_CA_BUNDLE" = ../extra/ca.crt;
};
serviceConfig = {
ExecStart = ''${pkgs.certbot}/bin/certbot renew'';
ExecStart = ''${pkgs.certbot}/bin/certbot renew --no-random-sleep-on-renew --force-renewal'';
ExecStartPost = "${pkgs.busybox}/bin/chown nginx:nginx -R /etc/letsencrypt";
};
};