From 1fa9caf1b840d5739fd3501a05041e6f3b901789 Mon Sep 17 00:00:00 2001
From: Sebastien Bourdeauducq <sb@m-labs.hk>
Date: Mon, 21 Dec 2020 13:04:24 +0800
Subject: [PATCH] nixbld: work around nixos bug with acme and local dns
 resolver

https://github.com/NixOS/nixpkgs/issues/106862
---
 nixbld-etc-nixos/configuration.nix | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/nixbld-etc-nixos/configuration.nix b/nixbld-etc-nixos/configuration.nix
index bdac38db..191536eb 100644
--- a/nixbld-etc-nixos/configuration.nix
+++ b/nixbld-etc-nixos/configuration.nix
@@ -445,6 +445,9 @@ in
       ];
     };
   };
+  # https://github.com/NixOS/nixpkgs/issues/106862
+  systemd.services."acme-fixperms".wants = [ "unbound.service" "dnsmasq.service" ];
+  systemd.services."acme-fixperms".after = [ "unbound.service" "dnsmasq.service" ];
   services.nginx = {
     enable = true;
     recommendedProxySettings = true;