Skip to content

Commit 04784be

Browse files
authored
Update cert-renewer@.service
Wrap command line env variables in braces so they are treated as a single argument (rather than split on whitespace)
1 parent 845fa07 commit 04784be

File tree

1 file changed

+2
-2
lines changed

1 file changed

+2
-2
lines changed

systemd/cert-renewer@.service

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -15,10 +15,10 @@ Environment=STEPPATH=/etc/step-ca \
1515
; ExecCondition checks if the certificate is ready for renewal,
1616
; based on the exit status of the command.
1717
; (In systemd 242 or below, you can use ExecStartPre= here.)
18-
ExecCondition=/usr/bin/step certificate needs-renewal $CERT_LOCATION
18+
ExecCondition=/usr/bin/step certificate needs-renewal ${CERT_LOCATION}
1919

2020
; ExecStart renews the certificate, if ExecStartPre was successful.
21-
ExecStart=/usr/bin/step ca renew --force $CERT_LOCATION $KEY_LOCATION
21+
ExecStart=/usr/bin/step ca renew --force ${CERT_LOCATION} ${KEY_LOCATION}
2222

2323
; Try to reload or restart the systemd service that relies on this cert-renewer
2424
; If the relying service doesn't exist, forge ahead.

0 commit comments

Comments
 (0)