[Unit]
Description=Watch host cert for moments-worker
Documentation=https://git.lair.cafe/grenade/architecture

[Path]
# Worker holds a sqlx pool with rustls — restart on cert rotation. The
# poller is idempotent, so dropping mid-poll is safe.
PathChanged=/etc/pki/tls/misc/{{HOSTNAME}}.pem
Unit=moments-worker-cert-reload.service

[Install]
WantedBy=multi-user.target