Merge pull request #84 from Ma27/restart-worker

module: restart worker when cert is changed
2026-01-12 13:13:36 +01:00 · 2026-01-12 13:13:36 +01:00 · 94c544f6cd
commit 94c544f6cd
parent e929253ded cf07c71418
1 changed files with 16 additions and 0 deletions
--- a/module.nix
+++ b/module.nix
@ -300,6 +300,16 @@ in
        );
      in
      {
+        assertions = [
+          {
+            assertion = cfg.nginx.enableACME -> cfg.nginx.enable;
+            message = ''
+              Cannot enable `services.authentik.nginx.enableACME` when
+              `services.authentik.nginx.enable` is `false`.
+            '';
+          }
+        ];
+
        services = {
          authentik.settings = {
            blueprints_dir = mkDefault "${cfg.authentikComponents.staticWorkdirDeps}/blueprints";
@ -441,6 +451,12 @@ in
          };
        };

+        security.acme.certs = mkIf cfg.nginx.enableACME {
+          ${cfg.nginx.host}.postRun = ''
+            systemctl restart authentik-worker.service
+          '';
+        };
+
        services.nginx = mkIf cfg.nginx.enable {
          enable = true;
          recommendedTlsSettings = true;