diff --git a/etc/systemd/system/certbot-renew.service.d/override.conf b/etc/systemd/system/certbot-renew.service.d/override.conf index 800ee1a..97e5fd9 100644 --- a/etc/systemd/system/certbot-renew.service.d/override.conf +++ b/etc/systemd/system/certbot-renew.service.d/override.conf @@ -20,7 +20,7 @@ ProtectKernelModules=true ProtectKernelTunables=true ProtectProc=invisible ProtectSystem=strict -ReadWritePaths=/etc/letsencrypt /var/lib/letsencrypt /var/log/letsencrypt -/srv/nginx -/var/cache/certbot-ocsp-fetcher +ReadWritePaths=/etc/letsencrypt /var/lib/letsencrypt /var/log/letsencrypt -/srv/nginx RestrictAddressFamilies=AF_INET AF_INET6 RestrictNamespaces=true RestrictRealtime=true