diff options
author | aszlig <aszlig@redmoonstudios.org> | 2016-04-12 04:53:53 +0200 |
---|---|---|
committer | aszlig <aszlig@redmoonstudios.org> | 2016-04-12 04:53:53 +0200 |
commit | 2ced6fcc757806c772633424bb47b14ab700acbd (patch) | |
tree | 4f09a4e301b5029476329711457494c1aa0135c3 /nixos/modules/services/misc/taskserver | |
parent | 9279ec732b5475540a3abac3ee8cf09e858be107 (diff) | |
download | nixlib-2ced6fcc757806c772633424bb47b14ab700acbd.tar nixlib-2ced6fcc757806c772633424bb47b14ab700acbd.tar.gz nixlib-2ced6fcc757806c772633424bb47b14ab700acbd.tar.bz2 nixlib-2ced6fcc757806c772633424bb47b14ab700acbd.tar.lz nixlib-2ced6fcc757806c772633424bb47b14ab700acbd.tar.xz nixlib-2ced6fcc757806c772633424bb47b14ab700acbd.tar.zst nixlib-2ced6fcc757806c772633424bb47b14ab700acbd.zip |
nixos/taskserver: Setup CA before main service
We need to explicitly make sure the CA is created before we actually launch the main Taskserver service in order to avoid race conditions where the preStart phase of the main service could possibly corrupt certificates if it would be started in parallel. Signed-off-by: aszlig <aszlig@redmoonstudios.org>
Diffstat (limited to 'nixos/modules/services/misc/taskserver')
-rw-r--r-- | nixos/modules/services/misc/taskserver/default.nix | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/nixos/modules/services/misc/taskserver/default.nix b/nixos/modules/services/misc/taskserver/default.nix index d82e9f77ea6a..c06287fe3b7e 100644 --- a/nixos/modules/services/misc/taskserver/default.nix +++ b/nixos/modules/services/misc/taskserver/default.nix @@ -396,6 +396,7 @@ in { systemd.services.taskserver-ca = mkIf needToCreateCA { requiredBy = [ "taskserver.service" ]; after = [ "taskserver-init.service" ]; + before = [ "taskserver.service" ]; description = "Initialize CA for TaskServer"; serviceConfig.Type = "oneshot"; serviceConfig.UMask = "0077"; |