From d1b90cf54005e690f30bdf991df05a68ca0762d3 Mon Sep 17 00:00:00 2001 From: Lin Jian Date: Wed, 29 Jun 2022 10:32:52 +0800 Subject: [PATCH] nixos/caddy: force caddy to reload config in ExecReload This patch follows an upstream commit[1]. Before this patch, if acme module is used, caddy will still use an old cert even a new one is available. The cause is that without --force flag, caddy will not reload an unchanged config. Refer to that commit[1] message for more information. [1]: https://github.com/caddyserver/dist/commit/979e498d6d01e1fe7c22db848a3e3bc65369183f --- nixos/modules/services/web-servers/caddy/default.nix | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/nixos/modules/services/web-servers/caddy/default.nix b/nixos/modules/services/web-servers/caddy/default.nix index 2b8c6f2e308b..b262313577f1 100644 --- a/nixos/modules/services/web-servers/caddy/default.nix +++ b/nixos/modules/services/web-servers/caddy/default.nix @@ -299,7 +299,7 @@ in # https://www.freedesktop.org/software/systemd/man/systemd.service.html#ExecStart= # If the empty string is assigned to this option, the list of commands to start is reset, prior assignments of this option will have no effect. ExecStart = [ "" "${cfg.package}/bin/caddy run --config ${cfg.configFile} --adapter ${cfg.adapter} ${optionalString cfg.resume "--resume"}" ]; - ExecReload = [ "" "${cfg.package}/bin/caddy reload --config ${cfg.configFile} --adapter ${cfg.adapter}" ]; + ExecReload = [ "" "${cfg.package}/bin/caddy reload --config ${cfg.configFile} --adapter ${cfg.adapter} --force" ]; ExecStartPre = "${cfg.package}/bin/caddy validate --config ${cfg.configFile} --adapter ${cfg.adapter}"; User = cfg.user;