Ignore crtkeyca change events

These files are sometimes changed without any renewal. It's much better
to generate crtkeyca files in batch, then touch a flag file to flush the
nginx config reloader.

Author: tdgroot

nginx_config_reloader/settings.py

@@ -13,14 +13,15 @@
 NGINX_PID_FILE = "/var/run/nginx.pid"
 ERROR_FILE = "nginx_error_output"
 
-WATCH_IGNORE_FILES = (
+_BASE_IGNORE_FILES = (
     # glob patterns
     ".*",
     "*~",
     "*.save",
     ERROR_FILE,
 )
-SYNC_IGNORE_FILES = WATCH_IGNORE_FILES + ("*.flag",)
+WATCH_IGNORE_FILES = _BASE_IGNORE_FILES + ("*.crtkeyca",)
+SYNC_IGNORE_FILES = _BASE_IGNORE_FILES + ("*.flag",)
 SYSLOG_SOCKET = "/dev/log"
 
 # Using include or load_module is forbidden unless

tests/test_nginx_config_reloader.py

@@ -467,6 +467,12 @@ def test_that_handle_event_does_not_need_reload_on_change_of_invisible_file(self
 
         self.assertFalse(tm.dirty)
 
+    def test_that_handle_event_does_not_need_reload_on_change_of_crtkeyca_file(self):
+        tm = self._get_nginx_config_reloader_instance()
+        tm.handle_event(Event("certificate.crtkeyca"))
+
+        self.assertFalse(tm.dirty)
+
     def test_remove_error_file_unlinks_the_error_file(self):
         mock_os = self.set_up_patch("nginx_config_reloader.os")
         mock_os.path.join.return_value = self.error_file