unkin/puppet-prod
2
0
Fork 0
Code Issues 10 Pull Requests Actions Packages Projects Releases Wiki Activity

fix: ensure nginx restarts on certificate changes
All checks were successful
Build / precommit (pull_request) Successful in 5m10s
Details

Browse Source 
Add hasrestart => true to nginx service in simpleproxy profile to ensure
nginx performs a full restart (not reload) when certificate files change.
This is required because nginx reload does not pick up SSL certificate
changes from disk.
This commit is contained in:
Ben Vincent 2025-09-29 22:08:16 +10:00
parent a9c959d924
commit 2fa0325a5f
1 changed files with 4 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
site/profiles/manifests/nginx/simpleproxy.pp
View File

@ -136,9 +136,10 @@ class profiles::nginx::simpleproxy (
} }
service { 'nginx': service { 'nginx':
ensure => true, ensure => true,
enable => true, enable => true,
subscribe => [ hasrestart => true,
subscribe => [
File[$selected_ssl_cert], File[$selected_ssl_cert],
File[$selected_ssl_key], File[$selected_ssl_key],
Nginx::Resource::Server[$nginx_vhost] Nginx::Resource::Server[$nginx_vhost]