18 commits

Author	SHA1	Message	Date
Carl Tashian	a067b3acad	Add a note about reload-or-try-restart in systemd	2021-11-23 17:23:24 -08:00
Carl Tashian	d925bc6ba9	Fix systemd renewer to use sh	2021-11-22 11:03:05 -08:00
Carl Tashian	04784be03e	Update cert-renewer@.service ... Wrap command line env variables in braces so they are treated as a single argument (rather than split on whitespace)	2021-09-21 17:23:29 -07:00
Carl Tashian	22ef324534	Fix needs-renewal condition and switch to using ExecCondition	2021-07-21 11:49:10 -05:00
Carl Tashian	3e5b90b6fa	systemd cert renewer can now use 'step certificate needs-renewal'	2021-07-19 08:34:22 -05:00
Carl Tashian	25325b6970	Revert systemd renewer unit change that was incorrect ... This reverts commit 75f24a103a.	2021-05-03 16:19:36 -07:00
Carl Tashian	75f24a103a	Sync cert renewer service with docs	2021-04-20 17:04:18 -07:00
Carl Tashian	9f0fce6df8	Quoting fix	2021-03-17 18:24:10 -07:00
Carl Tashian	2c09baf696	Two small systemd changes ... 1. Don't halt the cert renewer service from ExecStartPost ops if a relying service doesn't exist; halt it if the relying service exists and doesn't restart properly. 2. Use /bin/env bash instead of /bin/bash for portability.	2021-03-16 17:08:27 -07:00
max furman	ad48c8a881	[systemd file] add note about commenting sandboxing section for ... troubleshooting	2021-03-01 15:48:07 -08:00
max furman	0aa96a936f	[systemd] change executable location of step-ca	2021-03-01 15:42:34 -08:00
Carl Tashian	aaabdca61a	Typofix	2021-02-01 13:47:55 -08:00
Carl Tashian	52a0edd29d	Add readme	2021-02-01 13:11:14 -08:00
Carl Tashian	05daf22a1e	Add SystemCallArchitectures=native	2021-02-01 13:07:52 -08:00
Carl Tashian	73fc350b84	Add note about PKCS#11	2021-02-01 11:56:24 -08:00
Carl Tashian	9fd0964e1c	Add SystemCallFilter=@system-service	2021-01-28 09:45:20 -08:00
Carl Tashian	2af73881d7	Add ProtectHome=true	2021-01-28 07:48:21 -08:00
Carl Tashian	82f82d438c	Add systemd files	2021-01-27 17:29:29 -08:00