Optimized randomized_delay_sec, persistend & on_calendar for systemd-timer

group_vars/all

@@ -1,14 +1,20 @@
 # Server Tact Variables
-# @see https://man.archlinux.org/man/systemd.time.7
+# validate timers via:  systemctl list-timers
+# more information:     https://man.archlinux.org/man/systemd.time.7
+
+randomized_delay_sec:                         "15min"
 
 on_calendar_btrfs_health_check:               "*-*-* 00:00:00"
 on_calendar_journalctl_health_check:          "*-*-* 00:00:00"
 on_calendar_disc_space_check:                 "*-*-* 06,12,18,00:00:00"
 on_calendar_docker_health_check:              "*-*-* 09,10,11,12,13,14,15,16,17,18,19,20,21,22,23,00,01,02:00:00"
+
 on_calendar_backups_cleanup:                  "*-*-* 06,12,18,00:30:00"
 on_calendar_docker_volume_backup:             "*-*-* 03:30:00"
 on_calendar_docker_compose_restart_unhealthy: "*-*-* 09,10,11,12,13,14,15,16,17,18,19,20,21,22,23,00,01:30:00"
 on_calendar_pull_primary_backups:             "*-*-* 21:30:00"
+on_calendar_renew_lets_encrypt_certificates:  "*-*-* 12,00:30:00"
+on_calendar_deploy_mailu_certificates:        "*-*-* 12,00:50:00"
 
 # Space Variables
 size_percent_maximum_backup:                  75

roles/docker-mailu/templates/deploy-letsencrypt-mailu.timer.j2

@@ -1,9 +1,9 @@
 [Unit]
-Description=Twice daily deployment of Let's Encrypt's certificates
+Description=Deployment of Let's Encrypt's certificates
 
 [Timer]
-OnCalendar=0/12:00:00
-RandomizedDelaySec=1h
+OnCalendar={{on_calendar_deploy_mailu_certificates}}
+RandomizedDelaySec={{randomized_delay_sec}}
 Persistent=true
 
 [Install]

roles/native-backups-cleanup/templates/backups-cleanup.timer.j2

@@ -2,8 +2,9 @@
 Description=starts backups-cleanup.service
 
 [Timer]
-OnBootSec=1min
 OnCalendar={{on_calendar_backups_cleanup}}
+RandomizedDelaySec={{randomized_delay_sec}}
+Persistent=true
 
 [Install]
 WantedBy=timers.target

roles/native-btrfs-health-check/templates/btrfs-health-check.timer.j2

@@ -3,6 +3,8 @@ Description=starts btrfs-health-check.service
 
 [Timer]
 OnCalendar={{on_calendar_btrfs_health_check}}
+RandomizedDelaySec={{randomized_delay_sec}}
+Persistent=false
 
 [Install]
 WantedBy=timers.target

roles/native-certbot-nginx/handlers/main.yml

@@ -1,7 +1,7 @@
-- name: "restart certbot service"
+- name: "reload certbot service"
   systemd:
     name: certbot.service
-    state: restarted
+    state: reloaded
     enabled: yes
     daemon_reload: yes
 - name: "restart certbot timer"

roles/native-certbot-nginx/tasks/main.yml

@@ -2,12 +2,15 @@
   pacman:
     name: [certbot,certbot-nginx]
     state: present
-  notify: restart certbot service
 
 - name: configure certbot.service.tpl
-  template: src=certbot.service dest=/etc/systemd/system/certbot.service
-  notify: restart certbot service
+  template: 
+    src:  certbot.service.j2
+    dest: /etc/systemd/system/certbot.service
+  notify: reload certbot service
 
 - name: configure certbot.timer.tpl
-  template: src=certbot.timer dest=/etc/systemd/system/certbot.timer
+  template:
+    src:  certbot.timer.j2
+    dest: /etc/systemd/system/certbot.timer
   notify: restart certbot timer

roles/native-certbot-nginx/templates/certbot.timer

@@ -1,10 +0,0 @@
-[Unit]
-Description=Twice daily renewal of Let's Encrypt's certificates
-
-[Timer]
-OnCalendar=0/12:00:00
-RandomizedDelaySec=1h
-Persistent=true
-
-[Install]
-WantedBy=timers.target

roles/native-certbot-nginx/templates/certbot.timer.j2

@@ -0,0 +1,10 @@
+[Unit]
+Description=Renewal of Let's Encrypt's certificates
+
+[Timer]
+OnCalendar=0/12:00:00
+RandomizedDelaySec={{randomized_delay_sec}}
+Persistent=true
+
+[Install]
+WantedBy=timers.target

roles/native-disc-space-check/templates/disc-space-check.timer.j2

@@ -3,6 +3,8 @@ Description=starts disc-space-check.service
 
 [Timer]
 OnCalendar={{on_calendar_disc_space_check}}
+RandomizedDelaySec={{randomized_delay_sec}}
+Persistent=true
 
 [Install]
 WantedBy=timers.target

roles/native-docker-compose-restart-unhealthy/templates/docker-compose-restart-unhealthy.timer.j2

@@ -3,6 +3,8 @@ Description=starts docker-compose-restart-unhealthy.service
 
 [Timer]
 OnCalendar={{on_calendar_docker_compose_restart_unhealthy}}
+RandomizedDelaySec={{randomized_delay_sec}}
+Persistent=false
 
 [Install]
 WantedBy=timers.target

roles/native-docker-health-check/templates/docker-health-check.timer.j2

@@ -3,6 +3,8 @@ Description=starts docker-health-check.service
 
 [Timer]
 OnCalendar={{on_calendar_docker_health_check}}
+RandomizedDelaySec={{randomized_delay_sec}}
+Persistent=false
 
 [Install]
 WantedBy=timers.target

roles/native-docker-volume-backup/templates/docker-volume-backup.timer.j2

@@ -3,6 +3,8 @@ Description=backups the docker volumes
 
 [Timer]
 OnCalendar={{on_calendar_docker_volume_backup}}
+RandomizedDelaySec={{randomized_delay_sec}}
+Persistent=false
 
 [Install]
 WantedBy=timers.target

roles/native-journalctl-health-check/templates/journalctl-health-check.timer.j2

@@ -3,6 +3,8 @@ Description=starts journalctl-health-check.service
 
 [Timer]
 OnCalendar={{on_calendar_journalctl_health_check}}
+RandomizedDelaySec={{randomized_delay_sec}}
+Persistent=false
 
 [Install]
 WantedBy=timers.target

roles/native-pull-primary-backups/templates/pull-remote-backups.timer.j2

@@ -3,6 +3,8 @@ Description=starts pull remote backup timer
 
 [Timer]
 OnCalendar={{on_calendar_pull_primary_backups}}
+RandomizedDelaySec={{randomized_delay_sec}}
+Persistent=false
 
 [Install]
 WantedBy=timers.target