diff --git a/systemd/cert-renewer.service b/systemd/cert-renewer.service index 13593f2..76541d2 100644 --- a/systemd/cert-renewer.service +++ b/systemd/cert-renewer.service @@ -9,9 +9,6 @@ StartLimitIntervalSec=0 Type=oneshot User=root -Environment=CERT_LOCATION=/home/john/soteria/certs/soteria.crt \ - KEY_LOCATION=/home/john/soteria/certs/soteria.key - ; ExecCondition checks if the certificate is ready for renewal, ; based on the exit status of the command. ; (In systemd <242, you can use ExecStartPre= here.) @@ -20,8 +17,8 @@ ExecCondition=/usr/bin/step certificate needs-renewal ${CERT_LOCATION} ; ExecStart renews the certificate, if ExecStartPre was successful. ExecStart=/usr/bin/step ca renew --force ${CERT_LOCATION} ${KEY_LOCATION} -ExecStartPost=/usr/bin/openssl x509 -noout -enddate -in ${CERT_LOCATION} -ExecStartPost=/usr/bin/docker exec caddy caddy reload --config /etc/caddy/Caddyfile +; ExecStartPost=/usr/bin/openssl x509 -noout -enddate -in ${CERT_LOCATION} +; ExecStartPost=/usr/bin/docker exec caddy caddy reload --config /etc/caddy/Caddyfile [Install] WantedBy=multi-user.target \ No newline at end of file