From 8ccf4e05df7b7aa87940117a0915f3969ed5cdef Mon Sep 17 00:00:00 2001 From: Jörg Thalheim Date: Thu, 11 Aug 2022 13:28:37 +0200 Subject: nixos/consul: use signal instead of api for reload consul might require authentication if acls are enabled for `consul reload` to work. Signals never require authentication. --- nixos/modules/services/networking/consul.nix | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/nixos/modules/services/networking/consul.nix b/nixos/modules/services/networking/consul.nix index 16f1b5eec87..8964d64145f 100644 --- a/nixos/modules/services/networking/consul.nix +++ b/nixos/modules/services/networking/consul.nix @@ -201,7 +201,7 @@ in serviceConfig = { ExecStart = "@${cfg.package}/bin/consul consul agent -config-dir /etc/consul.d" + concatMapStrings (n: " -config-file ${n}") configFiles; - ExecReload = "${cfg.package}/bin/consul reload"; + ExecReload = "${pkgs.coreutils}/bin/kill -HUP $MAINPID"; PermissionsStartOnly = true; User = if cfg.dropPrivileges then "consul" else null; Restart = "on-failure"; -- cgit 1.4.1