diff --git a/systemd/cert-renewer.service b/systemd/cert-renewer.service index 76541d2..7fc9b54 100644 --- a/systemd/cert-renewer.service +++ b/systemd/cert-renewer.service @@ -3,22 +3,18 @@ Description=Certificate renewal After=network-online.target Documentation=https://smallstep.com/docs/step-ca/certificate-authority-server-production StartLimitIntervalSec=0 -; PartOf=cert-renewer.target [Service] Type=oneshot User=root -; ExecCondition checks if the certificate is ready for renewal, -; based on the exit status of the command. -; (In systemd <242, you can use ExecStartPre= here.) -ExecCondition=/usr/bin/step certificate needs-renewal ${CERT_LOCATION} +; ExecCondition checks if the certificate is ready for renewal. +; ExecCondition=/usr/bin/step certificate needs-renewal ${CERT_LOCATION} -; ExecStart renews the certificate, if ExecStartPre was successful. +; ExecStart renews the certificate, if ExecCondition was successful. ExecStart=/usr/bin/step ca renew --force ${CERT_LOCATION} ${KEY_LOCATION} -; ExecStartPost=/usr/bin/openssl x509 -noout -enddate -in ${CERT_LOCATION} -; ExecStartPost=/usr/bin/docker exec caddy caddy reload --config /etc/caddy/Caddyfile +ExecStartPost=/usr/bin/openssl x509 -noout -subject -issuer -enddate -in ${CERT_LOCATION} [Install] WantedBy=multi-user.target \ No newline at end of file