acmetool.service

This unit is provided by:

• https://packages.debian.org/unstable/acmetool

Options

• [Service]
  • CapabilityBoundingSet=CAP_CHOWN CAP_NET_BIND_SERVICE
  • ExecStart=/usr/bin/acmetool --batch reconcile
  • NoNewPrivileges
    Introduced in systemd 239
    =yes
  • PrivateDevices
    Introduced in systemd 209
    =yes
  • PrivateTmp=yes
  • ProtectControlGroups
    Introduced in systemd 232
    =yes
  • ProtectHome
    Introduced in systemd 214
    =yes
  • ProtectKernelTunables
    Introduced in systemd 232
    =yes
  • ProtectSystem
    Introduced in systemd 214
    =strict
  • ReadWritePaths=/var/lib/acme /run/acme
  • RestrictAddressFamilies=AF_UNIX AF_INET AF_INET6
  • RestrictRealtime
    Introduced in systemd 231
    =yes
  • TimeoutStartSec=5min
  • Type=oneshot
• [Unit]
  • After=nss-lookup.target apache2.service nginx.service
  • Description=Reconcile Let's Encrypt certificates
  • Documentation=man:acmetool(8)

Additionnal notes

Nothing here.