forked from pool/dehydrated
Marcus Rueckert
bce49d6f11
- In the timer service, execute root post run hooks in ExecStartPost - Fix run of root hooks - Simplify root hook execution, this is also more robust OBS-URL: https://build.opensuse.org/request/show/534175 OBS-URL: https://build.opensuse.org/package/show/security:dehydrated/dehydrated?expand=0&rev=15
15 lines
419 B
SYSTEMD
15 lines
419 B
SYSTEMD
[Unit]
|
|
Description=Certificate Update Runner for Dehydrated
|
|
ConditionPathExists=/etc/dehydrated/config
|
|
After=network-online.target
|
|
Wants=acmeresponder.socket
|
|
|
|
[Service]
|
|
Type=oneshot
|
|
ExecStartPost=-/usr/bin/find -L @POSTRUNHOOKS_DIR@ -maxdepth 1 -executable -type f -exec {} ;
|
|
ExecStart=/usr/bin/dehydrated --cron
|
|
|
|
# dehydrated --cron will drop permissions and run critical code as dehydrated user.
|
|
User=root
|
|
Group=root
|