Git-Mirrors/graphene-os-server-infrastructure
1
0
Fork 0
mirror of https://github.com/GrapheneOS/infrastructure.git synced 2025-05-16 13:42:32 -04:00
Code Issues Projects Releases Packages Wiki Activity

update OCSP cache path for certbot-renew.service

Browse source
This commit is contained in:
Daniel Micay 2023-09-02 15:07:28 -04:00
parent 067b42213f
commit 90411f367c
1 changed files with 1 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

2
systemd/system/certbot-renew.service.d/local.conf
View file

@ -18,7 +18,7 @@ ProtectKernelModules=true
ProtectKernelTunables=true ProtectKernelTunables=true
ProtectProc=invisible ProtectProc=invisible
ProtectSystem=strict ProtectSystem=strict
ReadWritePaths=/etc/letsencrypt /var/lib/letsencrypt /var/log/letsencrypt -/srv/certbot -/etc/nginx/ocsp-cache ReadWritePaths=/etc/letsencrypt /var/lib/letsencrypt /var/log/letsencrypt -/srv/certbot -/var/cache/certbot-ocsp-fetcher
RestrictAddressFamilies=AF_INET AF_INET6 RestrictAddressFamilies=AF_INET AF_INET6
RestrictNamespaces=true RestrictNamespaces=true
RestrictRealtime=true RestrictRealtime=true