mirror of
https://github.com/fort-nix/nix-bitcoin.git
synced 2024-11-26 08:10:41 +03:00
secrets: don't stop services when the secrets target stops
With krops or nixops the secrets target is always restarted during the deployment process. This previously caused unnecessary restarts of all nix-bitcoin services.
This commit is contained in:
parent
b701cb5603
commit
b0c223e716
@ -312,9 +312,14 @@ in {
|
||||
];
|
||||
|
||||
systemd.services.bitcoind = {
|
||||
requires = [ "nix-bitcoin-secrets.target" ];
|
||||
# Use `wants` instead of `requires` so that bitcoind and all dependent services
|
||||
# are not restarted when the secrets target restarts.
|
||||
# The secrets target always restarts when deploying with one of the methods
|
||||
# in ./deployment.
|
||||
wants = [ "nix-bitcoin-secrets.target" ];
|
||||
after = [ "network.target" "nix-bitcoin-secrets.target" ];
|
||||
wantedBy = [ "multi-user.target" ];
|
||||
|
||||
preStart = let
|
||||
extraRpcauth = concatMapStrings (name: let
|
||||
user = cfg.rpc.users.${name};
|
||||
|
@ -60,8 +60,15 @@ in
|
||||
};
|
||||
};
|
||||
|
||||
config = {
|
||||
systemd.targets.nix-bitcoin-secrets = {};
|
||||
config = {
|
||||
# This target is active when secrets have been setup successfully.
|
||||
systemd.targets.nix-bitcoin-secrets = {
|
||||
# This ensures that the secrets target is always activated when switching
|
||||
# configurations.
|
||||
# In this way `switch-to-configuration` is guaranteed to show an error
|
||||
# when activating the secrets target fails on deployment.
|
||||
wantedBy = [ "multi-user.target" ];
|
||||
};
|
||||
|
||||
nix-bitcoin.setupSecrets = mkIf cfg.generateSecrets true;
|
||||
|
||||
|
Loading…
Reference in New Issue
Block a user