2021-01-13 16:36:50 +00:00
|
|
|
[Unit]
|
|
|
|
Description="Let's Encrypt DNS01 certificate renewal for %I"
|
|
|
|
Wants=container-build@letsencrypt.service
|
|
|
|
After=container-build@letsencrypt.service
|
|
|
|
|
|
|
|
[Service]
|
|
|
|
Type=oneshot
|
2021-08-28 18:16:29 +00:00
|
|
|
SyslogIdentifier=%N
|
2021-08-14 21:28:28 +00:00
|
|
|
EnvironmentFile=%E/coreos-home-server/letsencrypt/letsencrypt.env
|
2021-08-28 18:16:29 +00:00
|
|
|
ExecStart=/bin/podman run --replace --rm --name letsencrypt-renew-%i \
|
2021-08-14 21:28:28 +00:00
|
|
|
--env-file %E/coreos-home-server/letsencrypt/letsencrypt.env \
|
2021-06-27 11:52:47 +00:00
|
|
|
--volume letsencrypt:/var/lib/letsencrypt:z \
|
2023-12-30 16:29:12 +00:00
|
|
|
--volume letsencrypt-certificates:/var/lib/letsencrypt-certificates:z \
|
|
|
|
--volume "letsencrypt-certificate-%i:/var/lib/letsencrypt-certificate-%i:z" \
|
2021-06-27 11:52:47 +00:00
|
|
|
localhost/letsencrypt:latest \
|
2023-12-30 17:34:45 +00:00
|
|
|
--pem --path /var/lib/letsencrypt --domains "%i" \
|
|
|
|
--server ${ACME_SERVER} --email ${ACME_EMAIL} --dns ${ACME_DNS_PROVIDER} renew \
|
|
|
|
--renew-hook /run-hook
|
2021-01-13 16:36:50 +00:00
|
|
|
|
|
|
|
[Install]
|
|
|
|
WantedBy=multi-user.target
|