fix acme perms

2026-04-19 03:20:25 +02:00 · 2026-04-19 03:20:25 +02:00 · 2f28178cb3
commit 2f28178cb3
parent 6d39d2a339
1 changed files with 2 additions and 0 deletions
--- a/hosts/sid/services/step-ca.nix
+++ b/hosts/sid/services/step-ca.nix
@ -75,6 +75,8 @@ in
    certs."sid-internal" = {
      domain = "*.${constants.intranet}";
      server = "https://${constants.ca-fqdn}:${toString cfg.port}/acme/acme/directory";
+      group = "nginx";
+      mode = "0640";
    };
  };