From 50f7c293e83aa4644aed67a9857820b8735b1040 Mon Sep 17 00:00:00 2001
From: Sebastien Bourdeauducq <sb@m-labs.hk>
Date: Mon, 27 Apr 2020 11:59:08 +0800
Subject: [PATCH] nixbld: fix recurring acme certificate permission problems

---
 nixbld-etc-nixos/configuration.nix | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/nixbld-etc-nixos/configuration.nix b/nixbld-etc-nixos/configuration.nix
index 48c8976..09a48c3 100644
--- a/nixbld-etc-nixos/configuration.nix
+++ b/nixbld-etc-nixos/configuration.nix
@@ -372,6 +372,8 @@ in
   security.acme.email = "sb" + "@m-labs.hk";
   security.acme.certs = {
     "nixbld.m-labs.hk" = {
+      group = "nginx";
+      user = "nginx";
       webroot = "/var/lib/acme/acme-challenge";
       extraDomains = {
         "m-labs.hk" = null;