diff options
| author | Christian Breunig <christian@breunig.cc> | 2025-10-29 20:20:41 +0100 |
|---|---|---|
| committer | Christian Breunig <christian@breunig.cc> | 2025-10-29 20:20:41 +0100 |
| commit | cfe00ff81dc09ea0a45e2ec3498a33a1d331d15a (patch) | |
| tree | 0aedb33e690d9fa712304f18819136b362438ebc /src/etc/systemd | |
| parent | 220209abde9646cf7b7fc4832e46b9b6c461c433 (diff) | |
| download | vyos-1x-cfe00ff81dc09ea0a45e2ec3498a33a1d331d15a.tar.gz vyos-1x-cfe00ff81dc09ea0a45e2ec3498a33a1d331d15a.zip | |
pki: T7953: systemd certbot.service must not use PrivateTmp
PrivateTmp needs to be disabled, otherwise we can not load the current
VyOS configuration to reconfigure the service automatically when certbot
runs.
Diffstat (limited to 'src/etc/systemd')
| -rw-r--r-- | src/etc/systemd/system/certbot.service.d/10-override.conf | 3 |
1 files changed, 3 insertions, 0 deletions
diff --git a/src/etc/systemd/system/certbot.service.d/10-override.conf b/src/etc/systemd/system/certbot.service.d/10-override.conf index 444a9b684..5c6d98b63 100644 --- a/src/etc/systemd/system/certbot.service.d/10-override.conf +++ b/src/etc/systemd/system/certbot.service.d/10-override.conf @@ -1,3 +1,6 @@ [Service] Group=vyattacfg +ExecStart= ExecStart=/usr/libexec/vyos/op_mode/pki.py renew_certbot +# Required for properly loading VyOS config +PrivateTmp=false |