mirror of
https://github.com/chatmail/relay.git
synced 2026-06-13 15:11:06 +00:00
holger krekel
da3d726fb1
Adds a new tls_external_cert_and_key config option for chatmail servers that manage their own TLS certificates (e.g. via an external ACME client or a load balancer). A systemd path unit (tls-cert-reload.path) watches the certificate file via inotify and automatically reloads dovecot and nginx when it changes. Postfix reads certs per TLS handshake so needs no reload. Also extracts openssl_selfsigned_args() so cert generation parameters are shared between SelfSignedTlsDeployer and the e2e test.
12 lines
309 B
FortranFixed
12 lines
309 B
FortranFixed
# Watch the TLS certificate file for changes.
|
|
# When the cert is updated (e.g. renewed by an external process),
|
|
# this triggers tls-cert-reload.service to restart the affected services.
|
|
[Unit]
|
|
Description=Watch TLS certificate for changes
|
|
|
|
[Path]
|
|
PathChanged={cert_path}
|
|
|
|
[Install]
|
|
WantedBy=multi-user.target
|