diff options
author | Dominique Martinet @ jormungand <asmadeus@codewreck.org> | 2020-09-28 12:49:05 +0200 |
---|---|---|
committer | Dominique Martinet @ jormungand <asmadeus@codewreck.org> | 2020-09-29 13:45:04 +0200 |
commit | bbe8d15b5c787a1a3fb7568c9765353cf31f53d9 (patch) | |
tree | 3c049597456a7e1cb367a0d7a179d51dbcdf7c2c | |
parent | 227719dd4a75ece98cebf960976a8cd84e459a53 (diff) |
nginx: remove preStart/reload hooks:
- ExecReload workaround no longer required
- bash is already pulled in by something else somehow so restore default preStart
-rw-r--r-- | profiles/nginx.nix | 6 |
1 files changed, 0 insertions, 6 deletions
diff --git a/profiles/nginx.nix b/profiles/nginx.nix index 1896349..6c591a9 100644 --- a/profiles/nginx.nix +++ b/profiles/nginx.nix @@ -17,12 +17,6 @@ systemd.services.nginx = { serviceConfig.BindPaths = [ "/var/spool/nginx" ]; serviceConfig.BindReadOnlyPaths = [ "/var/lib/acme" ]; - # removing preStart allows not pulling in bash - # and the prestart (configuration check) does not bring much - preStart = lib.mkForce ""; - # workaround confinement not being able to parse lists - # see https://github.com/NixOS/nixpkgs/issues/96840 - serviceConfig.ExecReload = lib.mkForce "${pkgs.coreutils}/bin/kill -HUP $MAINPID"; confinement = { enable = true; binSh = null; |