From 2aec74e5219325434a73ad01718861169db001ac Mon Sep 17 00:00:00 2001 From: Christian Breunig Date: Fri, 10 Oct 2025 20:22:20 +0200 Subject: pki: T7908: certbot.timer must call CLI script to update certificates CRON is not used for certbot as pki starts the certbot timer. --- debian/vyos-1x.preinst | 1 + src/etc/systemd/system/certbot.service.d/10-override.conf | 3 +++ 2 files changed, 4 insertions(+) create mode 100644 src/etc/systemd/system/certbot.service.d/10-override.conf diff --git a/debian/vyos-1x.preinst b/debian/vyos-1x.preinst index 08f48cac2..657e2719d 100644 --- a/debian/vyos-1x.preinst +++ b/debian/vyos-1x.preinst @@ -10,3 +10,4 @@ dpkg-divert --package vyos-1x --add --no-rename /etc/netplug/netplugd.conf dpkg-divert --package vyos-1x --add --no-rename /etc/netplug/netplug dpkg-divert --package vyos-1x --add --no-rename /etc/rsyslog.d/45-frr.conf dpkg-divert --package vyos-1x --add --no-rename /lib/udev/rules.d/99-systemd.rules +dpkg-divert --package vyos-1x --add --no-rename /etc/cron.d/certbot diff --git a/src/etc/systemd/system/certbot.service.d/10-override.conf b/src/etc/systemd/system/certbot.service.d/10-override.conf new file mode 100644 index 000000000..444a9b684 --- /dev/null +++ b/src/etc/systemd/system/certbot.service.d/10-override.conf @@ -0,0 +1,3 @@ +[Service] +Group=vyattacfg +ExecStart=/usr/libexec/vyos/op_mode/pki.py renew_certbot -- cgit v1.2.3