Re: Tip for letsencrypt users
Mike Wright <[email protected]>
| Newsgroups | gmane.mail.imap.courier.general |
|---|---|
| Message-ID | <[email protected]> |
On 11/22/23 00:33, Joost Ruijsch via courier-users wrote:
> On 22-11-2023 03:43, Mike Wright wrote:
>>
>> Putting it all in /lib/systemd/system/certbot.service takes care of
>> managing all of my courier related certificate duties.
>>
>
> Note that service files under /lib/systemd are not supposed to be
> edited. They are defaults and get overwritten on the next package
> update. Customizations go under /etc/systemd.
>
> https://docs.fedoraproject.org/en-US/quick-docs/systemd-understanding-and-administering/#_modifying_existing_systemd_services
>
> As for certbot, I have not been using it for years but I think you can
> drop a deployment script somewhere under /etc/letsencrypt/renewal-hooks
>
Thanks Joost,
The certbot service does not want to be enabled so I moved the copy/set
owner/perms to a script in /usr/local/sbin and call it from
letsencrypt/renewal-hooks/deploy.
As for running mkhdparams I created a simple daily.{service,timer} in
/etc/systemd/system and stuffed it in there. That service now acts as a
catchall for simple daily tasks I used to put in cron.daily that aren't
worthy of their own personal systemd service.
Sometimes when you have a lot of little fish it's easier to keep them
all in one aquarium ;D
_______________________________________________
courier-users mailing list
[email protected]
Unsubscribe: https://lists.sourceforge.net/lists/listinfo/courier-users