Commit 8ccf4e05 authored by Jörg Thalheim's avatar Jörg Thalheim
Browse files

nixos/consul: use signal instead of api for reload 

consul might require authentication if acls are enabled for `consul
reload` to work. Signals never require authentication.
parent 52d8a81a

nixos/modules/services/networking/consul.nix

+1 −1
Original line number Diff line number Diff line
@@ -201,7 +201,7 @@ in 
        serviceConfig = {

          ExecStart = "@${cfg.package}/bin/consul consul agent -config-dir /etc/consul.d"

            + concatMapStrings (n: " -config-file ${n}") configFiles;

          ExecReload = "${cfg.package}/bin/consul reload";

          ExecReload = "${pkgs.coreutils}/bin/kill -HUP $MAINPID";

          PermissionsStartOnly = true;

          User = if cfg.dropPrivileges then "consul" else null;

          Restart = "on-failure";