From 9202cf1d441ba25a13af5b577aa01323e0b919af Mon Sep 17 00:00:00 2001
From: Maxim Devaev <mdevaev@gmail.com>
Date: Fri, 24 Jun 2022 16:19:28 +0300
Subject: kvmd-certbot

---
 configs/os/services/kvmd-certbot.service |  8 ++++++++
 configs/os/services/kvmd-certbot.timer   | 10 ++++++++++
 configs/os/sysusers.conf                 |  5 +++++
 configs/os/tmpfiles.conf                 |  8 +++++++-
 4 files changed, 30 insertions(+), 1 deletion(-)
 create mode 100644 configs/os/services/kvmd-certbot.service
 create mode 100644 configs/os/services/kvmd-certbot.timer

(limited to 'configs/os')

diff --git a/configs/os/services/kvmd-certbot.service b/configs/os/services/kvmd-certbot.service
new file mode 100644
index 00000000..bf505aea
--- /dev/null
+++ b/configs/os/services/kvmd-certbot.service
@@ -0,0 +1,8 @@
+[Unit]
+Description=PiKVM - Certbot-Renew for KVMD-Nginx
+
+[Service]
+Type=oneshot
+ExecStart=/usr/bin/kvmd-certbot renew --quiet
+# Should we?..
+# PrivateTmp=true
diff --git a/configs/os/services/kvmd-certbot.timer b/configs/os/services/kvmd-certbot.timer
new file mode 100644
index 00000000..84fc9fcd
--- /dev/null
+++ b/configs/os/services/kvmd-certbot.timer
@@ -0,0 +1,10 @@
+[Unit]
+Description=Run KVMD-Certbot twice daily
+
+[Timer]
+OnCalendar=*-*-* 00/12:00:00
+RandomizedDelaySec=12h
+Persistent=true
+
+[Install]
+WantedBy=timers.target
diff --git a/configs/os/sysusers.conf b/configs/os/sysusers.conf
index a24fbef9..b25179b8 100644
--- a/configs/os/sysusers.conf
+++ b/configs/os/sysusers.conf
@@ -4,6 +4,7 @@ g kvmd-ipmi - -
 g kvmd-vnc - -
 g kvmd-nginx - -
 g kvmd-janus - -
+g kvmd-certbot - -
 
 u kvmd - "PiKVM - The main daemon" -
 u kvmd-pst - "PiKVM - Persistent storage" -
@@ -11,6 +12,7 @@ u kvmd-ipmi - "PiKVM - IPMI to KVMD proxy" -
 u kvmd-vnc - "PiKVM - VNC to KVMD/Streamer proxy" -
 u kvmd-nginx - "PiKVM - HTTP entrypoint" -
 u kvmd-janus - "PiKVM - Janus WebRTC Gateway" -
+u kvmd-certbot - "PiKVM - Certbot-Renew for KVMD-Nginx"
 
 m kvmd video
 m kvmd gpio
@@ -26,3 +28,6 @@ m kvmd-janus audio
 
 m kvmd-nginx kvmd
 m kvmd-nginx kvmd-janus
+m kvmd-nginx kvmd-certbot
+
+m kvmd-certbot kvmd-pst
diff --git a/configs/os/tmpfiles.conf b/configs/os/tmpfiles.conf
index 8e1734d2..973c5d43 100644
--- a/configs/os/tmpfiles.conf
+++ b/configs/os/tmpfiles.conf
@@ -1 +1,7 @@
-D /run/kvmd 0775 kvmd kvmd -
+D	/run/kvmd					0775	kvmd			kvmd			-
+D	/run/kvmd-certbot			0755	root			root			-
+D	/run/kvmd-certbot/webroot	0755	kvmd-certbot	kvmd-certbot	-
+
+D	/tmp/kvmd					0775	kvmd			kvmd			-
+D	/tmp/kvmd-nginx				0700	kvmd-nginx		root			-
+D	/tmp/kvmd-certbot			0755	kvmd-certbot	kvmd-certbot	-
-- 
cgit v1.2.3