From 0932385a360425c14a517406841f20fee7f64124 Mon Sep 17 00:00:00 2001
From: WilliButz <willibutz@posteo.de>
Date: Sun, 8 Sep 2024 17:12:43 +0200
Subject: [PATCH] module: restart services on-failure

---
 module.nix | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/module.nix b/module.nix
index 8a0fc7f..e9fed77 100644
--- a/module.nix
+++ b/module.nix
@@ -229,6 +229,8 @@ in
               "${pkgs.coreutils}/bin/ln -svf ${cfg.authentikComponents.staticWorkdirDeps}/authentik"
             ];
             ExecStart = "${cfg.authentikComponents.migrate}/bin/migrate.py";
+            Restart = "on-failure";
+            RestartSec = "1s";
             inherit (config.systemd.services.authentik.serviceConfig) StateDirectory;
           } ];
         };
@@ -246,6 +248,8 @@ in
             RuntimeDirectory = "authentik";
             WorkingDirectory = "%t/authentik";
             ExecStart = "${cfg.authentikComponents.manage}/bin/manage.py worker";
+            Restart = "on-failure";
+            RestartSec = "1s";
             LoadCredential = mkIf (cfg.nginx.enable && cfg.nginx.enableACME) [
               "${cfg.nginx.host}.pem:${config.security.acme.certs.${cfg.nginx.host}.directory}/fullchain.pem"
               "${cfg.nginx.host}.key:${config.security.acme.certs.${cfg.nginx.host}.directory}/key.pem"
@@ -275,6 +279,8 @@ in
             # TODO /run might be sufficient
             WorkingDirectory = "%S/authentik";
             ExecStart = "${cfg.authentikComponents.gopkgs}/bin/server";
+            Restart = "on-failure";
+            RestartSec = "1s";
           } ];
         };
       };