search

GSA-TTS / cg-egress-proxy

Provides controlled egress for apps in a restricted-egress cloud.gov space
Other
12 stars 4 forks source link

Force caddy reload on cert changes #13

Closed rahearn closed 1 year ago

rahearn commented 1 year ago

Looks like the non-force version of caddy reload compares the Caddyfile first, and doesn't actually reload caddy because that file didn't change when the cert files did.

rahearn commented 1 year ago

I'll be deploying this to notify today and will have full verification that it works as intended tomorrow, but using --force by hand resulted in the new ssl cert being picked up.

rahearn commented 1 year ago

I just verified that our deployed version with this fix properly read the updated cert and loaded it into caddy.

rahearn commented 1 year ago

@GSA/data-gov-team I think one of you may need to approve this before it can be merged.