Smail/deploy/nginx/smail-certificate-renew.service
smail a60898d682
Some checks are pending
Security Checks / security (push) Waiting to run
验收基线:保存无停机续期候选及真实挑战受阻证据
2026-09-18 02:37:49 +08:00

23 lines
488 B
Desktop File

[Unit]
Description=Smail certificate renewal
After=network-online.target nginx.service
Wants=network-online.target
[Service]
Type=oneshot
ExecStart=/usr/local/libexec/smail-acme/renew_certificate.py
EnvironmentFile=-/etc/smail/acme-dns.env
EnvironmentFile=-/etc/smail/acme-renew.env
TimeoutStartSec=720
TimeoutStopSec=15
MemoryHigh=96M
MemoryMax=128M
MemorySwapMax=0
CPUQuota=100%
TasksMax=64
Environment=GOMEMLIMIT=64MiB
UMask=0077
PrivateTmp=true
ProtectHome=true
NoNewPrivileges=true