Use env command

.gitignore

@@ -1 +1,2 @@
 *.swp
+*.env

Makefile

@@ -25,5 +25,7 @@ tarball: $(RPM_SOURCEDIR)/$(NAME)-$(VERSION).tar.gz
 
 .PHONY: install
 install:
+	install --directory $(DESTDIR)$(RPM_SYSCONFDIR)/nginx
+	install --target-directory=$(DESTDIR)$(RPM_SYSCONFDIR)/nginx etc/nginx/nginx.conf
 	install --directory $(DESTDIR)$(RPM_SYSCONFDIR)/certbot
 	install --target-directory=$(DESTDIR)$(RPM_SYSCONFDIR)/certbot etc/certbot/ovh.ini.tpl

etc/crontab

@@ -0,0 +1,16 @@
+SHELL=/bin/bash
+PATH=/sbin:/bin:/usr/sbin:/usr/bin
+MAILTO=root
+
+# For details see man 4 crontabs
+
+# Example of job definition:
+# .---------------- minute (0 - 59)
+# |  .------------- hour (0 - 23)
+# |  |  .---------- day of month (1 - 31)
+# |  |  |  .------- month (1 - 12) OR jan,feb,mar,apr ...
+# |  |  |  |  .---- day of week (0 - 6) (Sunday=0 or 7) OR sun,mon,tue,wed,thu,fri,sat
+# |  |  |  |  |
+# *  *  *  *  * user-name  command to be executed
+
+0 12 * * * root sleep $((RANDOM % 3600)) && certbot renew -q

netoik-rp.spec

@@ -23,12 +23,14 @@ Install the reverse proxy called nginx with a predefined configuration and with
 
 %post
 if [ $1 == 1 ]; then
-  python3 -m venv /opt/certbot
+  %{_bindir}/env envsubst < %{_sysconfdir}/certbot/ovh.ini.tpl > %{_sysconfdir}/certbot/ovh.ini
+  %{_bindir}/env chmod 600 %{_sysconfdir}/certbot/ovh.ini
+  %{_bindir}/env python3 -m venv /opt/certbot
   /opt/certbot/bin/pip install --upgrade pip certbot certbot-dns-ovh
-  envsubst < %{_sysconfdir}/certbot/ovh.ini.tpl > %{_sysconfdir}/certbot/ovh.ini
-  chmod 600 %{_sysconfdir}/certbot/ovh.ini
   /opt/certbot/bin/certbot certonly --dns-ovh --dns-ovh-credentials "%{_sysconfdir}/certbot/ovh.ini" -d "*.netoik.io" -d "*.samuel-campos.fr"
 fi
+%{_bindir}/env systemctl enable nginx
+%{_bindir}/env systemctl restart nginx
 
 %files
 %attr(644, root, root) %config %{_sysconfdir}/nginx/nginx.conf