ejabberd: TODO: fix acme/nginx group membership

2023-01-16 05:59:52 +00:00 · 2023-01-16 05:59:52 +00:00 · b4e19c037e
commit b4e19c037e
parent bd504f6c83
1 changed files with 2 additions and 0 deletions
--- a/hosts/servo/services/ejabberd.nix
+++ b/hosts/servo/services/ejabberd.nix
@ -46,6 +46,8 @@
  }];

  # provide access to certs
+  # TODO: this should just be `acme`. then we also add nginx to the `acme` group.
+  #   why is /var/lib/acme/* owned by `nginx` group??
  users.users.ejabberd.extraGroups = [ "nginx" ];

  security.acme.certs."uninsane.org".extraDomainNames = [