From ec91d1b83cfad151033433159a04eb7b5381bc73 Mon Sep 17 00:00:00 2001
From: tv <tv@krebsco.de>
Date: Tue, 4 Aug 2020 22:22:43 +0200
Subject: krebs.secret: restart units on secret change

---
 lass/2configs/binary-cache/server.nix | 2 +-
 lass/2configs/websites/sqlBackup.nix  | 2 +-
 lass/3modules/ejabberd/default.nix    | 4 +++-
 3 files changed, 5 insertions(+), 3 deletions(-)

(limited to 'lass')

diff --git a/lass/2configs/binary-cache/server.nix b/lass/2configs/binary-cache/server.nix
index fbaf16a3c..9b91035a8 100644
--- a/lass/2configs/binary-cache/server.nix
+++ b/lass/2configs/binary-cache/server.nix
@@ -12,7 +12,7 @@
     after = [
       config.krebs.secret.files.nix-serve-key.service
     ];
-    requires = [
+    partOf = [
       config.krebs.secret.files.nix-serve-key.service
     ];
   };
diff --git a/lass/2configs/websites/sqlBackup.nix b/lass/2configs/websites/sqlBackup.nix
index 72d7c7b9a..c9783bece 100644
--- a/lass/2configs/websites/sqlBackup.nix
+++ b/lass/2configs/websites/sqlBackup.nix
@@ -17,7 +17,7 @@
     after = [
       config.krebs.secret.files.mysql_rootPassword.service
     ];
-    requires = [
+    partOf = [
       config.krebs.secret.files.mysql_rootPassword.service
     ];
   };
diff --git a/lass/3modules/ejabberd/default.nix b/lass/3modules/ejabberd/default.nix
index 9642c64c9..20a38d572 100644
--- a/lass/3modules/ejabberd/default.nix
+++ b/lass/3modules/ejabberd/default.nix
@@ -17,6 +17,7 @@ in {
     certfile = mkOption {
       type = types.secret-file;
       default = {
+        name = "ejabberd-certfile";
         path = "${cfg.user.home}/ejabberd.pem";
         owner = cfg.user;
         source-path = "/var/lib/acme/lassul.us/full.pem";
@@ -25,6 +26,7 @@ in {
     dhfile = mkOption {
       type = types.secret-file;
       default = {
+        name = "ejabberd-dhfile";
         path = "${cfg.user.home}/dhparams.pem";
         owner = cfg.user;
         source-path = "/dev/null";
@@ -79,7 +81,7 @@ in {
         config.krebs.secret.files.ejabberd-s2s_certfile.service
         "network.target"
       ];
-      requires = [
+      partOf = [
         config.krebs.secret.files.ejabberd-certfile.service
         config.krebs.secret.files.ejabberd-s2s_certfile.service
       ];
-- 
cgit v1.2.3

[cgit] Unable to lock slot /tmp/cgit/ad200000.lock: No such file or directory (2)