From 66d8815e168ce8173f74f67bfc8543b8f2b30684 Mon Sep 17 00:00:00 2001 From: Ben Vincent Date: Mon, 29 Sep 2025 22:38:00 +1000 Subject: [PATCH] fix: ensure nginx restarts on certificate changes (#402) Add hasrestart => true to nginx service in simpleproxy profile to ensure nginx performs a full restart (not reload) when certificate files change. This is required because nginx reload does not pick up SSL certificate changes from disk. Reviewed-on: https://git.unkin.net/unkin/puppet-prod/pulls/402 --- site/profiles/manifests/nginx/simpleproxy.pp | 7 ++++--- 1 file changed, 4 insertions(+), 3 deletions(-) diff --git a/site/profiles/manifests/nginx/simpleproxy.pp b/site/profiles/manifests/nginx/simpleproxy.pp index 6337d78..0062157 100644 --- a/site/profiles/manifests/nginx/simpleproxy.pp +++ b/site/profiles/manifests/nginx/simpleproxy.pp @@ -136,9 +136,10 @@ class profiles::nginx::simpleproxy ( } service { 'nginx': - ensure => true, - enable => true, - subscribe => [ + ensure => true, + enable => true, + hasrestart => true, + subscribe => [ File[$selected_ssl_cert], File[$selected_ssl_key], Nginx::Resource::Server[$nginx_vhost]