job "certificates" { type = "batch" periodic { cron = "@monthly" } group "lego" { volume "certs" { type = "host" source = "ca-certificates" } task "lego" { driver = "exec" volume_mount { volume = "certs" destination = "/lego" } config { command = "certs.sh" } template { data = <