doc, NEWS: added 'watchdog' info

diff --git a/NEWS b/NEWS
index 57795d027aad7e5758507981155e20955eec7ab1..0506122147e5903f472300ebdd7b7f7ab947ad67 100644 (file)
--- a/NEWS
+++ b/NEWS
@@ -5,6 +5,7 @@ Improvements
 ------------
 - avoid multiple log lines when IPv6 isn't available (!1633)
 - manager: fix startup on Linux without libsystemd (!1608)
+- auto-reload TLS certificate files (!1626)
 
 
 Knot Resolver 6.0.9 (2024-11-11)

diff --git a/doc/dev/build.rst b/doc/dev/build.rst
index f65122146746aa12bbd2412bcf2585cce9aba00a..d3d87dce90e15fff34ecd6a67ec368ac6ded3d06 100644 (file)
--- a/doc/dev/build.rst
+++ b/doc/dev/build.rst
@@ -306,6 +306,7 @@ All dependencies are also listed in `pyproject.toml <https://gitlab.nic.cz/knot/
    "aiohttp_", "HTTP Client/Server for Python."
    "typing-extensions_", "Compatibility module for Python"
    "prometheus-client_", "Prometheus client for Python (optional)"
+   "watchdog_", "Python API for watching file system events (optional)"
 
 
 You can install the Manager using the generated ``setup.py``.
@@ -367,3 +368,4 @@ For development, it's possible to build the container directly from your git tre
 .. _aiohttp: https://docs.aiohttp.org/
 .. _prometheus-client: https://github.com/prometheus/client_python
 .. _typing-extensions: https://pypi.org/project/typing-extensions/
+.. _watchdog: https://github.com/gorakhargosh/watchdog

diff --git a/doc/user/config-network-server-tls.rst b/doc/user/config-network-server-tls.rst
index 420de59ca6705f045250450a209231ca4d293a39..8fc848786a63450afcf3daa3be17a9169968842e 100644 (file)
--- a/doc/user/config-network-server-tls.rst
+++ b/doc/user/config-network-server-tls.rst
@@ -130,9 +130,12 @@ policies.
 
    .. tip::
 
-      The certificate files aren't automatically reloaded on change.
-      If you update the certificate files, e.g. using ACME, you have to either
-      reload or restart the service(s).
+      If you have ``python-watchdog`` installed on your system,
+      the certificate files are automatically reloaded on change.
+      If you update the certificate files, e.g. using ACME,
+      the manager is notified about changes and commands all workers
+      to reload their certificate files. If you don't have ``python-watchdog``,
+      you have to restart the ``knot-resolver`` service manually.
 
    .. option:: sticket-secret: <str>