certhub-cert-export@.service

Synopsis

certhub-cert-export@.service

certhub-cert-export@.path

Description

A service which copies a certificate from the repository to the local filesystem.

A path unit which runs the service unit whenever the master branch of the local certhub repository is updated.

The instance name (systemd instance string specifier %i) is used as the basename of the configuration and the resulting certificate file.

Environment

CERTHUB_REPO

URL of the repository where certificates are stored. Defaults to: /var/lib/certhub/certs.git

CERTHUB_CERT_EXPORT_SRC

File / directory inside the repository which should be exported. Defaults to: {WORKDIR}/%i.fullchain.pem

CERTHUB_CERT_EXPORT_DEST

File / directory where the certificate should be placed. Defaults to: /var/lib/certhub/certs/%i.fullchain.pem

CERTHUB_CERT_EXPORT_RSYNC_ARGS

Arguments for rsync. Defaults to: --checksum --delete --devices --links --perms --recursive --specials --verbose

Files

/etc/certhub/env

Optional environment file shared by all instances and certhub services.

/etc/certhub/%i.env

Optional per-instance environment file shared by all certhub services.

/etc/certhub/certhub-cert-export.env

Optional per-service environment file shared by all certhub service instances.

/etc/certhub/%i.certhub-cert-export.env

Optional per-instance and per-service environment file.

See Also

rsync(1)