docker-compose/authentik
0
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

make renew hook executable; add systemd units and timer to renew certificates

Browse source
This commit is contained in:
Philip Henning 2024-11-19 13:11:40 +01:00
parent 57845a3bdf
commit 428d5c288f
2 changed files with 32 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

0
scripts/cert_renew_hook.sh Normal file → Executable file
View file

32
scripts/init.sh
View file

@ -65,3 +65,35 @@ if [[ ! -d ./data/.lego ]]; then
fi fi
# Setup cronjob to automatically renew certificates # Setup cronjob to automatically renew certificates
[[ ! -f /etc/systemd/system/lego-renew-sso-base23-de.service ]] && cat <<EOF > /etc/systemd/system/lego-renew-sso-base23-de.service && systemctl daemon-reload
[Unit]
Description=SSL Certificate renewal for sso.base23.de with LEGO
Documentation=https://go-acme.github.io/lego/
Wants=network-online.target
After=network-online.target
[Service]
Type=oneshot
ExecStart=/var/lib/apps/sso.base23.de/scripts/cert_renew.sh
WorkingDirectory=/var/lib/apps/sso.base23.de/
User=root
Group=root
RemainAfterExit=yes
[Install]
WantedBy=multi-user.target
EOF
[[ ! -f /etc/systemd/system/lego-renew-sso-base23-de.timer ]] && cat <<EOF > /etc/systemd/system/lego-renew-sso-base23-de.timer && systemctl daemon-reload && systemctl enable --now lego-renew-sso-base23-de.timer
[Unit]
Description=SSL Certificate renewal for sso.base23.de with LEGO Timer
[Timer]
OnCalendar=*-*-* 01:32:00
# add extra delay, here up to 1 hour:
RandomizedDelaySec=1h
Persistent=true
[Install]
WantedBy=timers.target
EOF