From 2ced6fcc757806c772633424bb47b14ab700acbd Mon Sep 17 00:00:00 2001 From: aszlig Date: Tue, 12 Apr 2016 04:53:53 +0200 Subject: nixos/taskserver: Setup CA before main service We need to explicitly make sure the CA is created before we actually launch the main Taskserver service in order to avoid race conditions where the preStart phase of the main service could possibly corrupt certificates if it would be started in parallel. Signed-off-by: aszlig --- nixos/modules/services/misc/taskserver/default.nix | 1 + 1 file changed, 1 insertion(+) (limited to 'nixos/modules/services/misc/taskserver/default.nix') diff --git a/nixos/modules/services/misc/taskserver/default.nix b/nixos/modules/services/misc/taskserver/default.nix index d82e9f77ea6ae..c06287fe3b7ea 100644 --- a/nixos/modules/services/misc/taskserver/default.nix +++ b/nixos/modules/services/misc/taskserver/default.nix @@ -396,6 +396,7 @@ in { systemd.services.taskserver-ca = mkIf needToCreateCA { requiredBy = [ "taskserver.service" ]; after = [ "taskserver-init.service" ]; + before = [ "taskserver.service" ]; description = "Initialize CA for TaskServer"; serviceConfig.Type = "oneshot"; serviceConfig.UMask = "0077"; -- cgit 1.4.1