From 543fd19f8dceadff12dc5a1337e9f0c4a429ec6c Mon Sep 17 00:00:00 2001
From: h7x4 <h7x4@nani.wtf>
Date: Fri, 22 May 2026 18:09:51 +0900
Subject: [PATCH] bekkalokk/vaultwarden: restart service on changed sops
 secrets

---
 hosts/bekkalokk/services/vaultwarden.nix | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/hosts/bekkalokk/services/vaultwarden.nix b/hosts/bekkalokk/services/vaultwarden.nix
index 028b710..0429376 100644
--- a/hosts/bekkalokk/services/vaultwarden.nix
+++ b/hosts/bekkalokk/services/vaultwarden.nix
@@ -10,11 +10,13 @@ in {
     owner = "vaultwarden";
     group = "vaultwarden";
     mode = "440";
+    restartUnits = [ "vaultwarden.service" ];
   };
   sops.secrets."vaultwarden/rsa_key.pub.pem" = {
     owner = "vaultwarden";
     group = "vaultwarden";
     mode = "440";
+    restartUnits = [ "vaultwarden.service" ];
   };
   sops.secrets."vaultwarden/env/DATABASE_PASSWORD" = { };
   sops.secrets."vaultwarden/env/SMTP_PASSWORD" = { };
@@ -22,6 +24,7 @@ in {
     owner = "vaultwarden";
     group = "vaultwarden";
     mode = "440";
+    restartUnits = [ "vaultwarden.service" ];
     content = ''
         DATABASE_URL=postgresql://vaultwarden:${config.sops.placeholder."vaultwarden/env/DATABASE_PASSWORD"}@postgres.pvv.ntnu.no/vaultwarden
         SMTP_PASSWORD=${config.sops.placeholder."vaultwarden/env/SMTP_PASSWORD"}