From 60fd55bbeea060640fde6834f7488544a58a6f27 Mon Sep 17 00:00:00 2001
From: Gregor Kleen <gkleen@yggdrasil.li>
Date: Sun, 24 Jan 2016 13:17:48 +0100
Subject: ssl cert renewal jitter

---
 ymir.nix | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/ymir.nix b/ymir.nix
index 2db35d87..b4817508 100644
--- a/ymir.nix
+++ b/ymir.nix
@@ -130,9 +130,9 @@ in rec {
     enable = true;
     systab = ''
       %weekly  * *   nix-collect-garbage --delete-older-than '7d'
-      %monthly * * * ${simp_le "/etc/nginx/ssl/git.yggdrasil.li" "git.yggdrasil.li"}
-      %monthly * * * ${simp_le "/etc/nginx/ssl/dirty-haskell.org" "dirty-haskell.org"}
-      %monthly * * * ${simp_le "/etc/nginx/ssl/www.dirty-haskell.org" "www.dirty-haskell.org"}
+      %monthly,jitter(300) * * * ${simp_le "/etc/nginx/ssl/git.yggdrasil.li" "git.yggdrasil.li"}
+      %monthly,jitter(300) * * * ${simp_le "/etc/nginx/ssl/dirty-haskell.org" "dirty-haskell.org"}
+      %monthly,jitter(300) * * * ${simp_le "/etc/nginx/ssl/www.dirty-haskell.org" "www.dirty-haskell.org"}
       %daily   * *   systemctl reload nginx.service
     '';
   };
-- 
cgit v1.2.3