Skip to content

Commit d72bbd7

Browse files
authored
Document access for Grafana and Nginx to certificates
Added section for granting access to certificate files for other services like Grafana and Nginx. Signed-off-by: Luiz Bizzio <73234672+luizbizzio@users.noreply.github.com>
1 parent 1fdd312 commit d72bbd7

1 file changed

Lines changed: 12 additions & 0 deletions

File tree

README.md

Lines changed: 12 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -112,6 +112,18 @@ sudo systemd-run --unit=local-https-renew-force --service-type=oneshot /usr/lo
112112

113113
-----
114114

115+
### ⚙️ Other services (Grafana, Nginx, etc.)
116+
117+
Any service that needs to read the certificate files can be granted access by adding its user to the `certs` group:
118+
````bash
119+
sudo usermod -aG certs grafana
120+
sudo usermod -aG certs nginx
121+
````
122+
123+
Group membership is preserved across renewals, once added, the service will continue to have access after every certificate rotation without any manual intervention.
124+
125+
-----
126+
115127
## 📦 Files created
116128

117129
Default folder:

0 commit comments

Comments
 (0)