Restart cfssl periodically

lib/k8s.nix

@@ -45,7 +45,8 @@ let
         mkdir -p $out/share/kube-system-bootstrap/charts
 
         export bash="${pkgs.bash}"
-        export apiserver="${settings.master.address}"
+        export apiserver="${settings.master.name}"
+        export apiserverAddress="${settings.master.address}"
         export initca="${initca}"
         export cluster="${clusterName}"
         export fileserver="${fileserver}"
@@ -110,6 +111,7 @@ let
         securePort = 4443;
         insecurePort = 8080;
         extraOpts = "--requestheader-client-ca-file ${cluster-ca}/ca.pem";
+        # verbosity = 4;
       };
 
       controllerManager = {
@@ -154,6 +156,12 @@ let
         Restart = "on-failure";
       };
     };
+    systemd.services.cfssl-restart  = {
+      enable = true;
+      startAt  = "00/6:00";
+      description = "Restrart cfssl which regularly locks up";
+      script = "systemctl restart cfssl.service";
+    };
   };
 
   kubeWorker = {