From: Aleš Mrázek <ales.mrazek@nic.cz>
Date: Mon, 2 Dec 2024 21:56:35 +0000 (+0100)
Subject: doc, NEWS: added  'watchdog' info
X-Git-Tag: v6.0.10~10^2
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=refs%2Fenvironments%2Fdocs-develop-file-cvmk6l%2Fdeployments%2F5831;p=thirdparty%2Fknot-resolver.git

doc, NEWS: added  'watchdog' info
---

diff --git a/NEWS b/NEWS
index 57795d027..050612214 100644
--- a/NEWS
+++ b/NEWS
@@ -5,6 +5,7 @@ Improvements
 ------------
 - avoid multiple log lines when IPv6 isn't available (!1633)
 - manager: fix startup on Linux without libsystemd (!1608)
+- auto-reload TLS certificate files (!1626)
 
 
 Knot Resolver 6.0.9 (2024-11-11)
diff --git a/doc/dev/build.rst b/doc/dev/build.rst
index f65122146..d3d87dce9 100644
--- a/doc/dev/build.rst
+++ b/doc/dev/build.rst
@@ -306,6 +306,7 @@ All dependencies are also listed in `pyproject.toml <https://gitlab.nic.cz/knot/
    "aiohttp_", "HTTP Client/Server for Python."
    "typing-extensions_", "Compatibility module for Python"
    "prometheus-client_", "Prometheus client for Python (optional)"
+   "watchdog_", "Python API for watching file system events (optional)"
 
 
 You can install the Manager using the generated ``setup.py``.
@@ -367,3 +368,4 @@ For development, it's possible to build the container directly from your git tre
 .. _aiohttp: https://docs.aiohttp.org/
 .. _prometheus-client: https://github.com/prometheus/client_python
 .. _typing-extensions: https://pypi.org/project/typing-extensions/
+.. _watchdog: https://github.com/gorakhargosh/watchdog
diff --git a/doc/user/config-network-server-tls.rst b/doc/user/config-network-server-tls.rst
index 420de59ca..8fc848786 100644
--- a/doc/user/config-network-server-tls.rst
+++ b/doc/user/config-network-server-tls.rst
@@ -130,9 +130,12 @@ policies.
 
    .. tip::
 
-      The certificate files aren't automatically reloaded on change.
-      If you update the certificate files, e.g. using ACME, you have to either
-      reload or restart the service(s).
+      If you have ``python-watchdog`` installed on your system,
+      the certificate files are automatically reloaded on change.
+      If you update the certificate files, e.g. using ACME,
+      the manager is notified about changes and commands all workers
+      to reload their certificate files. If you don't have ``python-watchdog``,
+      you have to restart the ``knot-resolver`` service manually.
 
    .. option:: sticket-secret: <str>