From cfe00ff81dc09ea0a45e2ec3498a33a1d331d15a Mon Sep 17 00:00:00 2001 From: Christian Breunig Date: Wed, 29 Oct 2025 20:20:41 +0100 Subject: pki: T7953: systemd certbot.service must not use PrivateTmp PrivateTmp needs to be disabled, otherwise we can not load the current VyOS configuration to reconfigure the service automatically when certbot runs. --- src/etc/systemd/system/certbot.service.d/10-override.conf | 3 +++ 1 file changed, 3 insertions(+) (limited to 'src/etc') diff --git a/src/etc/systemd/system/certbot.service.d/10-override.conf b/src/etc/systemd/system/certbot.service.d/10-override.conf index 444a9b684..5c6d98b63 100644 --- a/src/etc/systemd/system/certbot.service.d/10-override.conf +++ b/src/etc/systemd/system/certbot.service.d/10-override.conf @@ -1,3 +1,6 @@ [Service] Group=vyattacfg +ExecStart= ExecStart=/usr/libexec/vyos/op_mode/pki.py renew_certbot +# Required for properly loading VyOS config +PrivateTmp=false -- cgit v1.2.3