From 734ff5f50fa9e07e519387d504795aa513e1a3b2 Mon Sep 17 00:00:00 2001
From: Christian Breunig <christian@breunig.cc>
Date: Sun, 9 Jun 2024 20:45:04 +0200
Subject: pki: T6463: reverse-proxy service not reloaded when updating SSL
 certificate(s)

The haproxy reverse proxy was not reloaded/restarted with the new SSL
certificate(s) after a change in the PKI subsystem. This was due to missing
dependencies.

(cherry picked from commit 6ce8efdc8dafef67541bed89fc7dc7cd83335bf4)
---
 src/conf_mode/pki.py | 4 ++++
 1 file changed, 4 insertions(+)

(limited to 'src')

diff --git a/src/conf_mode/pki.py b/src/conf_mode/pki.py
index 8deec0e85..f37cac524 100755
--- a/src/conf_mode/pki.py
+++ b/src/conf_mode/pki.py
@@ -66,6 +66,10 @@ sync_search = [
         'keys': ['ca_certificate'],
         'path': ['interfaces', 'sstpc'],
     },
+    {
+        'keys': ['certificate', 'ca_certificate'],
+        'path': ['load_balancing', 'reverse_proxy'],
+    },
     {
         'keys': ['key'],
         'path': ['protocols', 'rpki', 'cache'],
-- 
cgit v1.2.3