Smail/deploy/systemd/smail-tls-sync.service
smail 1790e1f4f6
Some checks are pending
Security Checks / security (push) Waiting to run
修复只读证书同步并拒绝硬链接私钥
2026-09-20 04:53:18 +08:00

25 lines
563 B
Desktop File

[Unit]
Description=Smail 项目证书同步至 Nginx
After=smail.service nginx.service
StartLimitIntervalSec=60
StartLimitBurst=5
[Service]
Type=oneshot
User=root
UMask=0077
ExecStart=/opt/smail/smail-config --root /opt/smail --export-project-tls /etc/nginx/smail/tls.pem
ExecStart=/usr/sbin/nginx -t
ExecStart=/usr/bin/systemctl reload nginx.service
NoNewPrivileges=true
PrivateTmp=true
ProtectHome=true
ProtectSystem=strict
ReadWritePaths=/etc/nginx/smail /var/log/nginx
TimeoutStartSec=30
Restart=on-failure
RestartSec=5
[Install]
WantedBy=multi-user.target