diff --git a/README.md b/README.md index d17255e..385a6a3 100644 --- a/README.md +++ b/README.md @@ -2,7 +2,7 @@ This is a small `systemd` unit for automating the Certbot certificate renewal for the nginx web server. It runs monthly and simply executes - certbot renew --standalone --keep-until-expiring + certbot renew --standalone It uses the standalone authenticator, because Certbot nginx support is incomplete. This requires the web server to be stopped for a couple of seconds during each run (monthly, but can be overridden) and diff --git a/certbot-nginx.service b/certbot-nginx.service index 8fa86db..5c805e1 100644 --- a/certbot-nginx.service +++ b/certbot-nginx.service @@ -5,5 +5,5 @@ After=network-online.target [Service] Type=oneshot ExecStartPre=/bin/systemctl stop nginx -ExecStart=/usr/bin/certbot renew --standalone --keep-until-expiring +ExecStart=/usr/bin/certbot renew --standalone ExecStartPost=/bin/systemctl --no-block start nginx