summaryrefslogtreecommitdiff
path: root/configs/os
diff options
context:
space:
mode:
authorMaxim Devaev <[email protected]>2022-06-24 16:19:28 +0300
committerMaxim Devaev <[email protected]>2022-06-24 16:19:28 +0300
commit9202cf1d441ba25a13af5b577aa01323e0b919af (patch)
tree6b6c258e9082b32997aeab4a558f21ce8eb89f2a /configs/os
parent9f4c2412049e21ed6d1bd0237ba1d98ea338f7bb (diff)
kvmd-certbot
Diffstat (limited to 'configs/os')
-rw-r--r--configs/os/services/kvmd-certbot.service8
-rw-r--r--configs/os/services/kvmd-certbot.timer10
-rw-r--r--configs/os/sysusers.conf5
-rw-r--r--configs/os/tmpfiles.conf8
4 files changed, 30 insertions, 1 deletions
diff --git a/configs/os/services/kvmd-certbot.service b/configs/os/services/kvmd-certbot.service
new file mode 100644
index 00000000..bf505aea
--- /dev/null
+++ b/configs/os/services/kvmd-certbot.service
@@ -0,0 +1,8 @@
+[Unit]
+Description=PiKVM - Certbot-Renew for KVMD-Nginx
+
+[Service]
+Type=oneshot
+ExecStart=/usr/bin/kvmd-certbot renew --quiet
+# Should we?..
+# PrivateTmp=true
diff --git a/configs/os/services/kvmd-certbot.timer b/configs/os/services/kvmd-certbot.timer
new file mode 100644
index 00000000..84fc9fcd
--- /dev/null
+++ b/configs/os/services/kvmd-certbot.timer
@@ -0,0 +1,10 @@
+[Unit]
+Description=Run KVMD-Certbot twice daily
+
+[Timer]
+OnCalendar=*-*-* 00/12:00:00
+RandomizedDelaySec=12h
+Persistent=true
+
+[Install]
+WantedBy=timers.target
diff --git a/configs/os/sysusers.conf b/configs/os/sysusers.conf
index a24fbef9..b25179b8 100644
--- a/configs/os/sysusers.conf
+++ b/configs/os/sysusers.conf
@@ -4,6 +4,7 @@ g kvmd-ipmi - -
g kvmd-vnc - -
g kvmd-nginx - -
g kvmd-janus - -
+g kvmd-certbot - -
u kvmd - "PiKVM - The main daemon" -
u kvmd-pst - "PiKVM - Persistent storage" -
@@ -11,6 +12,7 @@ u kvmd-ipmi - "PiKVM - IPMI to KVMD proxy" -
u kvmd-vnc - "PiKVM - VNC to KVMD/Streamer proxy" -
u kvmd-nginx - "PiKVM - HTTP entrypoint" -
u kvmd-janus - "PiKVM - Janus WebRTC Gateway" -
+u kvmd-certbot - "PiKVM - Certbot-Renew for KVMD-Nginx"
m kvmd video
m kvmd gpio
@@ -26,3 +28,6 @@ m kvmd-janus audio
m kvmd-nginx kvmd
m kvmd-nginx kvmd-janus
+m kvmd-nginx kvmd-certbot
+
+m kvmd-certbot kvmd-pst
diff --git a/configs/os/tmpfiles.conf b/configs/os/tmpfiles.conf
index 8e1734d2..973c5d43 100644
--- a/configs/os/tmpfiles.conf
+++ b/configs/os/tmpfiles.conf
@@ -1 +1,7 @@
-D /run/kvmd 0775 kvmd kvmd -
+D /run/kvmd 0775 kvmd kvmd -
+D /run/kvmd-certbot 0755 root root -
+D /run/kvmd-certbot/webroot 0755 kvmd-certbot kvmd-certbot -
+
+D /tmp/kvmd 0775 kvmd kvmd -
+D /tmp/kvmd-nginx 0700 kvmd-nginx root -
+D /tmp/kvmd-certbot 0755 kvmd-certbot kvmd-certbot -