deac/ansible-role-ssh-cert
1
0
Fork 0
Code Issues Pull requests Releases Wiki Activity

user-certs renewal support added. vers -> defaults

Browse source
This commit is contained in:
Denis Knauf 2020-09-20 22:45:47 +02:00
parent 202f8b40da
commit 9cbe617309
10 changed files with 94 additions and 39 deletions
Download patch file Download diff file Expand all files Collapse all files

10
files/ssh-user-cert-renew@.service Normal file
View file

@ -0,0 +1,10 @@
[Unit]
Description=Renewal ssh user certificate %i
[Service]
EnvironmentFile=/etc/default/ssh-cert-renew
EnvironmentFile=-%h/.config/ssh/cert-renew
Type=oneshot
ExecStart=+mkdir -p %h/.config/ssh
ExecStart=/usr/local/bin/timer-mail -t ${ssh_cert_mail_to} -f ${ssh_cert_mail_from} -s "ssh certificate renewal %i" -ve \
/etc/systemd/ssh-cert-renew ${ssh_cert_sign_host} %h/.ssh/%i