Inital Commit

root/lib/systemd/system/traefik-certs-dumper.service

@@ -0,0 +1,30 @@
+[Unit]
+Description=Traefik Certificate Dumper
+ConditionPathExists=/etc/traefik/acme-hook
+ConditionPathExists=/var/lib/traefik/acme.json
+StartLimitBurst=24
+StartLimitIntervalSec=3600
+After=network.target network-online.target
+Wants=network-online.target
+
+[Service]
+Type=simple
+Restart=on-failure
+ExecStart=/usr/sbin/traefik-certs-dumper file --source '/var/lib/traefik/acme.json' --version 'v3' --crt-name 'root' --dest '/var/lib/traefik/acme-repository' --domain-subdir --key-name 'root' --post-hook '/etc/traefik/acme-hook' --watch
+ExecStartPost=/bin/sh -c "umask '022'; pgrep -n 'traefik-certs' > '/run/traefik/traefik-certs-dumper.pid'"
+ExecStop=/bin/rm --force '/run/traefik/traefik-certs-dumper.pid'
+User=traefik
+Group=traefik
+PrivateDevices=true
+PrivateTmp=true
+ProtectSystem=strict
+RuntimeDirectory=traefik
+RuntimeDirectoryMode=755
+RuntimeDirectoryPreserve=yes
+ReadOnlyDirectories=/etc/traefik
+ReadOnlyDirectories=/var/lib/traefik
+ReadWriteDirectories=/var/lib/traefik/acme-repository
+WorkingDirectory=/var/lib/traefik
+
+[Install]
+WantedBy=multi-user.target