summaryrefslogtreecommitdiff
path: root/config-certbot.PKGBUILD
diff options
context:
space:
mode:
Diffstat (limited to 'config-certbot.PKGBUILD')
-rw-r--r--config-certbot.PKGBUILD8
1 files changed, 4 insertions, 4 deletions
diff --git a/config-certbot.PKGBUILD b/config-certbot.PKGBUILD
index acffa7a..caff71c 100644
--- a/config-certbot.PKGBUILD
+++ b/config-certbot.PKGBUILD
@@ -1,5 +1,5 @@
. ${BUILDFILE%/*}/common.sh
-pkgver=20160713
+pkgver=20160713.4
depends=(certbot)
@@ -71,8 +71,7 @@ domains=(
umask 0027
"${cmd[@]}"
sudo /etc/ssl/misc/certbot-hook
-}
-'
+}'
# Renewal, however, is very simple. It is handled by
# `certbot-renew.service` (triggered by the associated `.timer`). It
@@ -99,6 +98,7 @@ ExecStart=/usr/bin/certbot renew --quiet --renew-hook 'sudo /etc/ssl/misc/certbo
User=keys
UMask=0027
EOF
+add-unit etc/systemd/system/timers.target.wants/certbot-renew.timer
# Both `certbot-get` and `certbot-renew.serviceq prove ownership of
# the domain via the `http-01` challenge. `/etc/nginx/nginx.conf`
@@ -176,7 +176,7 @@ EOF
# updated, and `sudo` has been configured to allow the keys user to do
# this without a password. Right now `certbot-hook` just runs
# `systemctl reload nginx.service`.
-add-file etc/ssl/misc/certbot-hook <<EOF
+add-file -m755 etc/ssl/misc/certbot-hook <<EOF
#!/bin/bash
systemctl reload nginx.service
EOF