From d1f5d3c09e2a03843f4b6bbf0516e614de947767 Mon Sep 17 00:00:00 2001
From: Ben Vincent <ben@unkin.net>
Date: Sun, 25 Feb 2024 21:23:43 +1100
Subject: [PATCH] fix: restart vault-unseal

- restart vault-unseal when the unseal keys change
---
 site/profiles/manifests/vault/unseal.pp | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/site/profiles/manifests/vault/unseal.pp b/site/profiles/manifests/vault/unseal.pp
index 81ccb89..cff32a1 100644
--- a/site/profiles/manifests/vault/unseal.pp
+++ b/site/profiles/manifests/vault/unseal.pp
@@ -32,6 +32,6 @@ class profiles::vault::unseal (
     active    => true,
     enable    => true,
     require   => File['/usr/local/bin/vault-unseal.sh'],
-    subscribe => Service['vault'],
+    subscribe => [Service['vault'],File['/etc/vault/unseal_keys']],
   }
 }