From 6fb2003b8d163c82471af89081d9803e0c8456a5 Mon Sep 17 00:00:00 2001
From: jochen <jschoubben@gmail.com>
Date: Mon, 21 Sep 2026 23:25:06 +0200
Subject: [PATCH] route-proxy: the trust gate names the binding it reads and
 runs again when the authority moved; the server follows it (ADR 0099)

---
 modules/route-proxy/module.json | 9 ++++++++-
 1 file changed, 8 insertions(+), 1 deletion(-)

diff --git a/modules/route-proxy/module.json b/modules/route-proxy/module.json
index c04555d..aecaca4 100644
--- a/modules/route-proxy/module.json
+++ b/modules/route-proxy/module.json
@@ -86,6 +86,9 @@
         "sh",
         "-c",
         "for i in $(seq 1 60); do wget -q -T 10 --no-check-certificate -O /ca/root.crt \"$ACME_ROOTS\" && grep -q 'BEGIN CERTIFICATE' /ca/root.crt && exit 0; sleep 2; done; echo \"the authority at $ACME_ROOTS did not serve its roots within two minutes\" >&2; exit 1"
+      ],
+      "restart-on": [
+        "acme-env"
       ]
     },
     {
@@ -108,7 +111,11 @@
         "TLS_LISTEN": ":443",
         "ACME_CACHE": "/acme",
         "ACME_CA_BUNDLE": "/ca/root.crt"
-      }
+      },
+      "restart-on": [
+        "trust",
+        "acme-env"
+      ]
     }
   ],
   "build": {
-- 
2.54.0