From b4e19c037e1fae508f872513a8b42a80962a1276 Mon Sep 17 00:00:00 2001
From: colin <colin@uninsane.org>
Date: Mon, 16 Jan 2023 05:59:52 +0000
Subject: [PATCH] ejabberd: TODO: fix acme/nginx group membership

---
 hosts/servo/services/ejabberd.nix | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/hosts/servo/services/ejabberd.nix b/hosts/servo/services/ejabberd.nix
index 88805fef..7c14f21c 100644
--- a/hosts/servo/services/ejabberd.nix
+++ b/hosts/servo/services/ejabberd.nix
@@ -46,6 +46,8 @@
   }];
 
   # provide access to certs
+  # TODO: this should just be `acme`. then we also add nginx to the `acme` group.
+  #   why is /var/lib/acme/* owned by `nginx` group??
   users.users.ejabberd.extraGroups = [ "nginx" ];
 
   security.acme.certs."uninsane.org".extraDomainNames = [