Restart renewal service after issuing new cert with CA, reload affect…

…ed services (#451) * Restart renewal service after issuing a new cert via ACME * Immediately reload affected services when a new cert is issued through ACME * Ignore errors on reloading affected services, it's not our problem here
maxhoesel-ansible · Dec 24, 2024 · 1733ad2 · 1733ad2
1 parent 8b31409
commit 1733ad2
Show file tree

Hide file tree

Showing 2 changed files with 8 additions and 0 deletions.
diff --git a/roles/step_acme_cert/handlers/main.yml b/roles/step_acme_cert/handlers/main.yml
@@ -2,3 +2,8 @@
   service:
     name: '{{ step_acme_cert_renewal_service }}'
     state: restarted
+
+- name: reload affected services
+  command: systemctl try-reload-or-restart {{ step_acme_cert_renewal_reload_services | join(' ') }}
+  when: step_acme_cert_renewal_reload_services
+  ignore_errors: true
diff --git a/roles/step_acme_cert/tasks/main.yml b/roles/step_acme_cert/tasks/main.yml
@@ -29,6 +29,9 @@
   become_user: "{{ step_acme_cert_user }}"
   environment:
     STEPPATH: "{{ _resolved_steppath }}"
+  notify:
+    - reload affected services
+    - restart renewal service
 
 - name: Cert and key permissions are set
   file: