docker: extract cert monitor from background process to systemd timer

The cert monitoring was an orphaned background process (`monitor_certificates &`)
Replace with a proper systemd timer/service (every 60s).
Also made journald ForwardToConsole=yes idempotent.
This commit is contained in:
j4n
2026-02-16 20:12:45 +01:00
parent 85ee7dbeb5
commit 0585314468
8 changed files with 56 additions and 49 deletions

View File

@@ -29,10 +29,7 @@ services:
environment:
MAIL_DOMAIN: $MAIL_DOMAIN
CMDEPLOY_STAGES: ${CMDEPLOY_STAGES:-}
# Certificate monitoring (only needed with USE_FOREIGN_CERT_MANAGER)
USE_FOREIGN_CERT_MANAGER: ${USE_FOREIGN_CERT_MANAGER:-}
ENABLE_CERTS_MONITORING: ${ENABLE_CERTS_MONITORING:-}
CERTS_MONITORING_TIMEOUT: ${CERTS_MONITORING_TIMEOUT:-}
network_mode: "host"
volumes:
## system