From 7e6a59631abb177e60cd367270239fe9ba22ea27 Mon Sep 17 00:00:00 2001
From: Daniel Barlow <dan@telent.net>
Date: Tue, 12 Aug 2025 20:07:39 +0100
Subject: [PATCH] firewall needs the secrets subscriber

---
 modules/firewall/default.nix | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/modules/firewall/default.nix b/modules/firewall/default.nix
index 4936eea..bddb484 100644
--- a/modules/firewall/default.nix
+++ b/modules/firewall/default.nix
@@ -53,6 +53,9 @@ let
   };
 in
 {
+  # we use the secrets subscriber to restart when interfaces change
+  imports = [ ../secrets ];
+
   options = {
     system.service.firewall = mkOption {
       type = liminix.lib.types.serviceDefn;