1 files changed, 10 insertions, 1 deletions

diff --git a/modules/certspotter.nix b/modules/certspotter.nix
index 8d49b9e9..70c28b74 100644
--- a/modules/certspotter.nix
+++ b/modules/certspotter.nix
@@ -5,9 +5,19 @@ with lib;
 let
   cfg = config.services.certspotter;
 
+  script = pkgs.writeShellApplication {
+    name = "certspotter-script";
+    runtimeInputs = with pkgs; [ coreutils ];
+    text = ''
+      mkdir -p "''${LOGS_DIRECTORY}"
+      env > $(mktemp -p "''${LOGS_DIRECTORY}" $(date -Ins).XXXXXXXXXX.env)
+    '';
+  };
+
   startOptions = cfg.extraOptions
                  ++ optionals (cfg.logs != null) ["-logs" cfg.logs]
                  ++ ["-watchlist" (pkgs.writeText "watchlist" (concatStringsSep "\n" cfg.watchList))
+                     "-script" "${script}/bin/certspotter-script"
                     ];
 in {
   options = {
@@ -39,7 +49,6 @@ in {
         ExecStart = "${cfg.package}/bin/certspotter -state_dir $STATE_DIRECTORY ${escapeShellArgs startOptions}";
         StateDirectory = "certspotter";
         LogsDirectory = "certspotter";
-        StandardOutput = "append:$LOGS_DIRECTORY/certspotter.log";
         DynamicUser = true;
       };
     };