From d2f24b53404ad5c20a1302d57914b50bea1d45de Mon Sep 17 00:00:00 2001
From: Timo Makinen <tmakinen@foo.sh>
Date: Mon, 1 Aug 2016 11:13:11 +0300
Subject: [PATCH] bacula: Restart services if certificate is changed.

---
 bacula/manifests/init.pp | 32 +++++++++++++++++---------------
 1 file changed, 17 insertions(+), 15 deletions(-)

diff --git a/bacula/manifests/init.pp b/bacula/manifests/init.pp
index 040cd8b..05ebfd6 100644
--- a/bacula/manifests/init.pp
+++ b/bacula/manifests/init.pp
@@ -12,11 +12,12 @@ class bacula::certificates {
     }
 
     file { "/etc/pki/tls/certs/bacula.crt":
-        ensure => present,
-        source => "${::puppet_ssldir}/certs/${::homename}.pem",
-        mode   => "0644",
-        owner  => "root",
-        group  => "root",
+        ensure  => present,
+        source  => "${::puppet_ssldir}/certs/${::homename}.pem",
+        mode    => "0644",
+        owner   => "root",
+        group   => "root",
+        require => File["/etc/pki/tls/private/bacula.key"],
     }
 
 }
@@ -65,9 +66,9 @@ class bacula::client($password=undef) {
     }
 
     service { "bacula-fd":
-        ensure  => running,
-        enable  => true,
-        require => Class["bacula::certificates"],
+        ensure    => running,
+        enable    => true,
+        subscribe => File["/etc/pki/tls/certs/bacula.crt"],
     }
 
 }
@@ -266,10 +267,11 @@ class bacula::director($password=undef,
     }
 
     service { "bacula-director":
-        ensure  => running,
-        enable  => true,
-        name    => "bacula-dir",
-        require => [ File["/srv/bacula"], Class["bacula::certificates"], ],
+        ensure    => running,
+        enable    => true,
+        name      => "bacula-dir",
+        require   => File["/srv/bacula"],
+        subscribe => File["/etc/pki/tls/certs/bacula.crt"],
     }
 
 }
@@ -396,9 +398,9 @@ class bacula::storage($password = undef) {
     }
 
     service { "bacula-sd":
-        ensure  => running,
-        enable  => true,
-        require => Class["bacula::certificates"],
+        ensure    => running,
+        enable    => true,
+        subscribe => File["/etc/pki/tls/certs/bacula.crt"],
     }
 
 }