Skip to content
Snippets Groups Projects
Commit debe6852 authored by Tom Prince's avatar Tom Prince
Browse files

Don't wait for cerbot before starting PaymentServer.

Since !146, PaymentServer is proxied behind nginx, so there is no need to wait
for certificates or network interfaces before starting the server.
parent 91a58609
No related branches found
No related tags found
3 merge requests!180merge develop into production,!177merge develop into staging,!170Don't wait for cerbot before starting PaymentServer.
......@@ -122,26 +122,6 @@ in {
description = "ZKAP Issuer";
wantedBy = [ "multi-user.target" ];
# Make sure we have a certificate the first time, if we are running over
# TLS and require a certificate.
# ACME will issue an interim self-signed certificate, which we want to
# use at least in the local dev network. But if ACME cannot get the
# created key signed by LE (probably because the host is not reachable
# from outside, or the domain is not a legit TLD) the ACME cert service
# will "fail". We still want to start our PaymentServer. Hence a weaker
# "wants" instead of a "requires" dependency.
# When ACME receives a fully signed cert from LE, it will reload NGINX.
wants = lib.optional cfg.tls "${certServiceName}.service";
after = [
# Make sure there is a network so we can bind to all of the
# interfaces.
"network.target"
] ++
# Make sure we run after the certificate is issued, if we are running
# over TLS and require a certificate.
lib.optional cfg.tls "${certServiceName}.service";
# It really shouldn't ever exit on its own! If it does, it's a bug
# we'll have to fix. Restart it and hope it doesn't happen too much
# before we can fix whatever the issue is.
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment