nixos/acme: add random delay to timer

This way we behave like good citizens and won't overload Let's Encrypt with lots of cert renewal requests at the same time.
NixOS · Jan 25, 2017 · 516760a · 516760a
1 parent 2a939c4
commit 516760a
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/nixos/modules/security/acme.nix b/nixos/modules/security/acme.nix
@@ -284,6 +284,8 @@ in
             OnCalendar = cfg.renewInterval;
             Unit = "acme-${cert}.service";
             Persistent = "yes";
+            AccuracySec = "5m";
+            RandomizedDelaySec = "1h";
           };
         })
       );