dustin/configpolicy
1
1
Fork 0
Code Issues Releases Activity

roles/certbot: Run periodically as certbot user

Browse Source 
The default systemd unit configuration for *certbot-renew.service* runs
the `certbot renew …` command as root. This can cause permissions
issues, since this Ansible role expects the *certbot* user to be able to
access all configuration, data, and log files. As such, this commit adds
a systemd unit extension for *certbot-renew.service* to run the command
as *certbot*.
This commit is contained in:
Dustin
2018-12-30 15:22:27 -06:00
parent 50396c88d4
commit d1a72de6b0
3 changed files with 16 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
roles/certbot/files/certbot-renew-runas.service Normal file
View File

@@ -0,0 +1,3 @@
[Service]
User=certbot
Group=certbot