Commit graph

18 commits

Author SHA1 Message Date
Carl Tashian
a067b3acad Add a note about reload-or-try-restart in systemd 2021-11-23 17:23:24 -08:00
Carl Tashian
d925bc6ba9 Fix systemd renewer to use sh 2021-11-22 11:03:05 -08:00
Carl Tashian
04784be03e
Update cert-renewer@.service
Wrap command line env variables in braces so they are treated as a single argument (rather than split on whitespace)
2021-09-21 17:23:29 -07:00
Carl Tashian
22ef324534 Fix needs-renewal condition and switch to using ExecCondition 2021-07-21 11:49:10 -05:00
Carl Tashian
3e5b90b6fa systemd cert renewer can now use 'step certificate needs-renewal' 2021-07-19 08:34:22 -05:00
Carl Tashian
25325b6970 Revert systemd renewer unit change that was incorrect
This reverts commit 75f24a103a.
2021-05-03 16:19:36 -07:00
Carl Tashian
75f24a103a Sync cert renewer service with docs 2021-04-20 17:04:18 -07:00
Carl Tashian
9f0fce6df8 Quoting fix 2021-03-17 18:24:10 -07:00
Carl Tashian
2c09baf696 Two small systemd changes
1. Don't halt the cert renewer service from ExecStartPost ops if a relying service doesn't exist; halt it if the relying service exists and doesn't restart properly.
2. Use /bin/env bash instead of /bin/bash for portability.
2021-03-16 17:08:27 -07:00
max furman
ad48c8a881 [systemd file] add note about commenting sandboxing section for
troubleshooting
2021-03-01 15:48:07 -08:00
max furman
0aa96a936f [systemd] change executable location of step-ca 2021-03-01 15:42:34 -08:00
Carl Tashian
aaabdca61a Typofix 2021-02-01 13:47:55 -08:00
Carl Tashian
52a0edd29d Add readme 2021-02-01 13:11:14 -08:00
Carl Tashian
05daf22a1e Add SystemCallArchitectures=native 2021-02-01 13:07:52 -08:00
Carl Tashian
73fc350b84 Add note about PKCS#11 2021-02-01 11:56:24 -08:00
Carl Tashian
9fd0964e1c Add SystemCallFilter=@system-service 2021-01-28 09:45:20 -08:00
Carl Tashian
2af73881d7 Add ProtectHome=true 2021-01-28 07:48:21 -08:00
Carl Tashian
82f82d438c Add systemd files 2021-01-27 17:29:29 -08:00