Replace the certbot systemd unit with a cron job with notifications

Uses cronic (https://habilis.net/cronic/) to filter out the stdout and
send a sensible email to ops@kosmos.org when renewal fails

Closes #3

site-cookbooks/kosmos-base/metadata.rb

@@ -4,7 +4,7 @@ maintainer_email 'mail@kosmos.org'
 license          'MIT'
 description      'The Kosmos base cookbook'
 long_description IO.read(File.join(File.dirname(__FILE__), 'README.md'))
-version          '0.2.0'
+version          '0.2.1'
 chef_version     '>= 14.0' # Uses the new sudo resource
 
 depends 'apt'

site-cookbooks/kosmos-base/recipes/letsencrypt.rb

@@ -72,3 +72,23 @@ template "/root/gandi_dns_certbot_hook.sh" do
   variables gandi_api_key: gandi_api_data_bag_item["key"]
   mode 0770
 end
+
+# Replace the systemd timer with a cronjob, for easy email notifications
+%w(certbot.service certbot.timer).each do |service|
+  service service do
+    action :disable
+  end
+
+  file "/lib/systemd/system/#{service}" do
+    action :delete
+  end
+end
+
+package "cronic"
+
+cron "certbot" do
+  hour "0,12"
+  minute 0
+  mailto "ops@kosmos.org"
+  command "cronic /usr/bin/certbot renew"
+end