nixbld: fix recurring acme certificate permission problems

2020-04-27 11:59:08 +08:00 · 2020-04-27 11:59:08 +08:00 · 50f7c293e8
parent 3cface01af
commit 50f7c293e8
1 changed files with 2 additions and 0 deletions
--- a/nixbld-etc-nixos/configuration.nix
+++ b/nixbld-etc-nixos/configuration.nix
@ -372,6 +372,8 @@ in
  security.acme.email = "sb" + "@m-labs.hk";
  security.acme.certs = {
    "nixbld.m-labs.hk" = {
+      group = "nginx";
+      user = "nginx";
      webroot = "/var/lib/acme/acme-challenge";
      extraDomains = {
        "m-labs.hk" = null;