2 files changed, 12 insertions, 6 deletions
diff --git a/roles/x509/static/cert/prepare/handlers/main.yml b/roles/x509/static/cert/prepare/handlers/main.yml
new file mode 100644
index 00000000..b169d6ca
--- /dev/null
+++ b/roles/x509/static/cert/prepare/handlers/main.yml
@@ -0,0 +1,6 @@
+---
+- name: reload services for x509 certificates
+  loop: "{{ x509_certificate_reload_services | default([]) }}"
+  service:
+    name: "{{ item }}"
+    state: reloaded
diff --git a/roles/x509/static/cert/prepare/tasks/main.yml b/roles/x509/static/cert/prepare/tasks/main.yml
index 1327c3b3..03df7542 100644
--- a/roles/x509/static/cert/prepare/tasks/main.yml
+++ b/roles/x509/static/cert/prepare/tasks/main.yml
@@ -10,7 +10,7 @@
     mode: "{{ static_cert_config.mode | default('0700') }}"
     owner: "{{ static_cert_config.owner | default(omit) }}"
     group: "{{ static_cert_config.group | default(omit) }}"
-  notify: "{{ x509_notify_on_change | default(omit) }}"
+  notify: reload services for x509 certificates
 
 - name: install key for static certificate
   copy:
@@ -19,7 +19,7 @@
     mode: "{{ static_cert_config.key.mode | default('0600') }}"
     owner: "{{ static_cert_config.key.owner | default(omit) }}"
     group: "{{ static_cert_config.key.group | default(omit) }}"
-  notify: "{{ x509_notify_on_change | default(omit) }}"
+  notify: reload services for x509 certificates
 
 - name: install static certificate
   copy:
@@ -28,7 +28,7 @@
     mode: "{{ static_cert_config.cert.mode | default('0644') }}"
     owner: "{{ static_cert_config.cert.owner | default(omit) }}"
     group: "{{ static_cert_config.cert.group | default(omit) }}"
-  notify: "{{ x509_notify_on_change | default(omit) }}"
+  notify: reload services for x509 certificates
 
 - name: export paths to basic certificate files
   set_fact:
@@ -46,7 +46,7 @@
       mode: "{{ static_cert_config.chain.mode | default('0644') }}"
       owner: "{{ static_cert_config.chain.owner | default(omit) }}"
       group: "{{ static_cert_config.chain.group | default(omit) }}"
-    notify: "{{ x509_notify_on_change | default(omit) }}"
+    notify: reload services for x509 certificates
 
   - name: install fullchain for static certificate
     copy:
@@ -57,7 +57,7 @@
       mode: "{{ static_cert_config.cert.mode | default('0644') }}"
       owner: "{{ static_cert_config.cert.owner | default(omit) }}"
       group: "{{ static_cert_config.cert.group | default(omit) }}"
-    notify: "{{ x509_notify_on_change | default(omit) }}"
+    notify: reload services for x509 certificates
 
   - name: export paths to additional certificate files
     set_fact:
@@ -74,7 +74,7 @@
     file:
       path: "{{ static_cert_path }}/{{ static_cert_name }}-{{ item }}.pem"
       state: absent
-    notify: "{{ x509_notify_on_change | default(omit) }}"
+    notify: reload services for x509 certificates
 
   - name: make sure variable that points to the chain certificate file is unset
     set_fact: