From 2f28178cb3fcb770592a2739afa43f8994ec7f4d Mon Sep 17 00:00:00 2001
From: sid <sid@sid.ovh>
Date: Sun, 19 Apr 2026 03:20:25 +0200
Subject: [PATCH] fix acme perms

---
 hosts/sid/services/step-ca.nix | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/hosts/sid/services/step-ca.nix b/hosts/sid/services/step-ca.nix
index 20fcae3..9ec74de 100644
--- a/hosts/sid/services/step-ca.nix
+++ b/hosts/sid/services/step-ca.nix
@@ -75,6 +75,8 @@ in
     certs."sid-internal" = {
       domain = "*.${constants.intranet}";
       server = "https://${constants.ca-fqdn}:${toString cfg.port}/acme/acme/directory";
+      group = "nginx";
+      mode = "0640";
     };
   };