ansible-edda/playbooks/roles/services/deploy/rproxy/templates/systemd/container-rproxy-certbot.service.j2

[Unit]
Description=Podman container-rproxy-certbot.service
Documentation=man:podman-generate-systemd(1)
OnFailure=status-mail@%n.service

[Service]
Environment=PODMAN_SYSTEMD_UNIT=%n
TimeoutStopSec=70
ExecStartPre=/bin/rm -f %t/container-rproxy-certbot.pid %t/container-rproxy-certbot.ctr-id
ExecStartPre=/usr/bin/podman pull docker.io/certbot/certbot
ExecStart=/usr/bin/podman run \
                          --conmon-pidfile %t/container-rproxy-certbot.pid \
                          --cidfile %t/container-rproxy-certbot.ctr-id \
                          --cgroups=no-conmon \
                          --pod-id-file %t/pod-rproxy.pod-id \
                          --replace \
                          -v /etc/resolv.conf:/etc/resolv.conf:ro \
                          -v {{ services_data_directory }}/pod-rproxy/etc-letsencrypt/_data:/etc/letsencrypt \
                          -v var-lib-letsencrypt:/var/lib/letsencrypt \
                          -v var-www-html:/var/www/html \
                          --name=pod-rproxy-certbot \
                          docker.io/certbot/certbot --non-interactive renew
ExecStopPost=/usr/bin/podman rm --ignore -f --cidfile %t/container-rproxy-certbot.ctr-id
Type=oneshot