Hot Reload

AI Cost Firewall supports hot reload with SIGHUP.

Binary / systemd

kill -HUP $(pgrep ai-firewall)

Docker Compose

docker compose kill -s HUP firewall

Behavior

On reload, the firewall reloads config, validates it, rebuilds runtime dependencies, and atomically swaps runtime state.

Expected logs:

received SIGHUP, reloading config
config and runtime successfully reloaded

Changing provider base URLs or embedding settings through reload rebuilds runtime dependencies. If the new configuration is invalid, the existing runtime remains active.