From 2fa0325a5f230f479669f25e5d7d8dc3129e6875 Mon Sep 17 00:00:00 2001 From: Ben Vincent Date: Mon, 29 Sep 2025 22:08:16 +1000 Subject: [PATCH] fix: ensure nginx restarts on certificate changes Add hasrestart => true to nginx service in simpleproxy profile to ensure nginx performs a full restart (not reload) when certificate files change. This is required because nginx reload does not pick up SSL certificate changes from disk. --- site/profiles/manifests/nginx/simpleproxy.pp | 7 ++++--- 1 file changed, 4 insertions(+), 3 deletions(-) diff --git a/site/profiles/manifests/nginx/simpleproxy.pp b/site/profiles/manifests/nginx/simpleproxy.pp index 6337d78..0062157 100644 --- a/site/profiles/manifests/nginx/simpleproxy.pp +++ b/site/profiles/manifests/nginx/simpleproxy.pp @@ -136,9 +136,10 @@ class profiles::nginx::simpleproxy ( } service { 'nginx': - ensure => true, - enable => true, - subscribe => [ + ensure => true, + enable => true, + hasrestart => true, + subscribe => [ File[$selected_ssl_cert], File[$selected_ssl_key], Nginx::Resource::Server[$nginx_vhost] -- 2.47.3