summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorChristian Breunig <christian@breunig.cc>2025-10-10 20:22:20 +0200
committerChristian Breunig <christian@breunig.cc>2025-10-10 20:26:34 +0200
commit2aec74e5219325434a73ad01718861169db001ac (patch)
tree09951a024659093a2e6a258f8b61e10cf8c45697
parentc8759c0f89f36b9a4b603fb9587f9c2f6709edd6 (diff)
downloadvyos-1x-2aec74e5219325434a73ad01718861169db001ac.tar.gz
vyos-1x-2aec74e5219325434a73ad01718861169db001ac.zip
pki: T7908: certbot.timer must call CLI script to update certificates
CRON is not used for certbot as pki starts the certbot timer.
-rw-r--r--debian/vyos-1x.preinst1
-rw-r--r--src/etc/systemd/system/certbot.service.d/10-override.conf3
2 files changed, 4 insertions, 0 deletions
diff --git a/debian/vyos-1x.preinst b/debian/vyos-1x.preinst
index 08f48cac2..657e2719d 100644
--- a/debian/vyos-1x.preinst
+++ b/debian/vyos-1x.preinst
@@ -10,3 +10,4 @@ dpkg-divert --package vyos-1x --add --no-rename /etc/netplug/netplugd.conf
dpkg-divert --package vyos-1x --add --no-rename /etc/netplug/netplug
dpkg-divert --package vyos-1x --add --no-rename /etc/rsyslog.d/45-frr.conf
dpkg-divert --package vyos-1x --add --no-rename /lib/udev/rules.d/99-systemd.rules
+dpkg-divert --package vyos-1x --add --no-rename /etc/cron.d/certbot
diff --git a/src/etc/systemd/system/certbot.service.d/10-override.conf b/src/etc/systemd/system/certbot.service.d/10-override.conf
new file mode 100644
index 000000000..444a9b684
--- /dev/null
+++ b/src/etc/systemd/system/certbot.service.d/10-override.conf
@@ -0,0 +1,3 @@
+[Service]
+Group=vyattacfg
+ExecStart=/usr/libexec/vyos/op_mode/pki.py renew_certbot