From 03965917eaef7d97687951b980358be693c88770 Mon Sep 17 00:00:00 2001
From: John Lancaster <32917998+jsl12@users.noreply.github.com>
Date: Sun, 19 Apr 2026 17:49:14 -0500
Subject: [PATCH] reload-or-restart sshd

---
 modules/features/step-client.nix | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/modules/features/step-client.nix b/modules/features/step-client.nix
index ef46a7a..79d6063 100644
--- a/modules/features/step-client.nix
+++ b/modules/features/step-client.nix
@@ -41,7 +41,7 @@ let
     config = {
       binName = "sign-ssh-host-cert";
       package = config.pkgs.step-cli;
-      extraPackages = with config.pkgs; [ hostname iproute2 ];
+      extraPackages = with config.pkgs; [ hostname iproute2 systemd ];
       preHook = ''
         HOSTNAME=$(hostname -s)
         IP_ADDRESS=$(ip -4 -o addr show scope global | while read -r _ _ _ addr _; do
@@ -64,6 +64,9 @@ let
         ++ lib.optionals (config.provisioner != null) [ "--provisioner" "${config.provisioner}" ]
         ++ lib.optionals config.overwrite [ "-f" ]
         ++ mkPrincipalArgs config.extraPrincipals;
+      postHook = ''
+        systemctl reload-or-restart sshd
+      '';
     };
   });
 in