krebs.secret: restart units on secret change

1 files changed, 3 insertions, 1 deletions

diff --git a/tv/3modules/charybdis/default.nix b/tv/3modules/charybdis/default.nix
index 3809da4..a0638e1 100644
--- a/tv/3modules/charybdis/default.nix
+++ b/tv/3modules/charybdis/default.nix
@@ -17,6 +17,7 @@ in {
     ssl_dh_params = mkOption {
       type = types.secret-file;
       default = {
+        name = "charybdis-ssl_dh_params";
         path = "${cfg.user.home}/dh.pem";
         owner = cfg.user;
         source-path = toString <secrets> + "/charybdis.dh.pem";
@@ -25,6 +26,7 @@ in {
     ssl_private_key = mkOption {
       type = types.secret-file;
       default = {
+        name = "charybdis-ssl_private_key";
         path = "${cfg.user.home}/ssl.key.pem";
         owner = cfg.user;
         source-path = toString <secrets> + "/charybdis.key.pem";
@@ -56,7 +58,7 @@ in {
         config.krebs.secret.files.charybdis-ssl_private_key.service
         "network-online.target"
       ];
-      requires = [
+      partOf = [
         config.krebs.secret.files.charybdis-ssl_dh_params.service
         config.krebs.secret.files.charybdis-ssl_private_key.service
       ];