No OneTemporary
Actions

Size

1 KB

Referenced Files

None

Subscribers

None

View Options

	diff --git a/roles/paas-docker/systemd-unit/files/letsencrypt-renewal b/roles/paas-docker/systemd-unit/files/letsencrypt-renewal
	new file mode 100755
	index 0000000..7089039
	--- /dev/null
	+++ b/roles/paas-docker/systemd-unit/files/letsencrypt-renewal
	@@ -0,0 +1,15 @@
	+#!/usr/bin/env sh
	+
	+nginx_test() {
	+ nginx_output="$(nginx -t 2>&1)"
	+ nginx_returncode="$?"
	+
	+ if [ "$nginx_returncode" -eq 0 ] && [ -n "$(echo "${nginx_output}" \| grep warn)" ]; then
	+ return 2;
	+ else
	+ return "$nginx_returncode";
	+ fi;
	+}
	+
	+
	+letsencrypt renew && nginx_test && service nginx restart
	diff --git a/roles/paas-docker/systemd-unit/files/letsencrypt.service b/roles/paas-docker/systemd-unit/files/letsencrypt.service
	new file mode 100644
	index 0000000..d93ef57
	--- /dev/null
	+++ b/roles/paas-docker/systemd-unit/files/letsencrypt.service
	@@ -0,0 +1,6 @@
	+[Unit]
	+Description=Renew Let's encrypt certificates.
	+
	+[Service]
	+Type=simple
	+ExecStart=letsencrypt-renewal
	diff --git a/roles/paas-docker/systemd-unit/files/letsencrypt.timer b/roles/paas-docker/systemd-unit/files/letsencrypt.timer
	new file mode 100644
	index 0000000..d85d763
	--- /dev/null
	+++ b/roles/paas-docker/systemd-unit/files/letsencrypt.timer
	@@ -0,0 +1,7 @@
	+[Unit]
	+Description=Runs letsencrypt-renewal every month
	+
	+[Timer]
	+OnCalendar=--26 12:15:00
	+Persistent=yes
	+Unit=letsencrypt.service