From 90411f367c1cd53e37aa77daef03fee2a17027e2 Mon Sep 17 00:00:00 2001 From: Daniel Micay Date: Sat, 2 Sep 2023 15:07:28 -0400 Subject: [PATCH] update OCSP cache path for certbot-renew.service --- systemd/system/certbot-renew.service.d/local.conf | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/systemd/system/certbot-renew.service.d/local.conf b/systemd/system/certbot-renew.service.d/local.conf index d5f03ca..4591197 100644 --- a/systemd/system/certbot-renew.service.d/local.conf +++ b/systemd/system/certbot-renew.service.d/local.conf @@ -18,7 +18,7 @@ ProtectKernelModules=true ProtectKernelTunables=true ProtectProc=invisible ProtectSystem=strict -ReadWritePaths=/etc/letsencrypt /var/lib/letsencrypt /var/log/letsencrypt -/srv/certbot -/etc/nginx/ocsp-cache +ReadWritePaths=/etc/letsencrypt /var/lib/letsencrypt /var/log/letsencrypt -/srv/certbot -/var/cache/certbot-ocsp-fetcher RestrictAddressFamilies=AF_INET AF_INET6 RestrictNamespaces=true RestrictRealtime=true