From f2a41436c916b7763057e848b66a0158c6846ff5 Mon Sep 17 00:00:00 2001 From: David Vazgenovich Shakaryan Date: Tue, 21 Mar 2023 02:41:58 -0700 Subject: use encrypted token in systemd service --- systemd/hetzner-ddns@.service | 5 +++-- systemd/hetzner-ddns@home.example.org.service.d/opts.conf | 2 -- 2 files changed, 3 insertions(+), 4 deletions(-) delete mode 100644 systemd/hetzner-ddns@home.example.org.service.d/opts.conf (limited to 'systemd') diff --git a/systemd/hetzner-ddns@.service b/systemd/hetzner-ddns@.service index 28a25fd..58e6e6f 100644 --- a/systemd/hetzner-ddns@.service +++ b/systemd/hetzner-ddns@.service @@ -2,6 +2,7 @@ Description=Hetzner DDNS updater [Service] -Type=oneshot -ExecStart=hetzner-ddns.sh %i +ExecStart=hetzner-ddns.sh %I DynamicUser=yes +LoadCredentialEncrypted=hetzner_token.cred +Environment=HETZNER_TOKEN_FILE=%d/hetzner_token.cred diff --git a/systemd/hetzner-ddns@home.example.org.service.d/opts.conf b/systemd/hetzner-ddns@home.example.org.service.d/opts.conf deleted file mode 100644 index 1e62794..0000000 --- a/systemd/hetzner-ddns@home.example.org.service.d/opts.conf +++ /dev/null @@ -1,2 +0,0 @@ -[Service] -Environment="HETZNER_TOKEN=access_token" -- cgit v1.2.3-70-g09d2