From 447ae08e2498eda27e66df8c638eefc695cb840d Mon Sep 17 00:00:00 2001
From: nyanloutre <paul@nyanlout.re>
Date: Thu, 16 Apr 2020 08:56:01 +0200
Subject: [PATCH] matrix-synapse: fix cert permissions

---
 systems/LoutreOS/services.nix | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/systems/LoutreOS/services.nix b/systems/LoutreOS/services.nix
index 9ecd136..3e1bd25 100644
--- a/systems/LoutreOS/services.nix
+++ b/systems/LoutreOS/services.nix
@@ -302,7 +302,8 @@ in
   #   </target>
   # '';
 
-  users.groups.acme.members = [ "matrix-synapse" ];
+  users.groups.nginx.members = [ "matrix-synapse" ];
+  security.acme.certs."nyanlout.re".allowKeysForGroup = true;
 
   security.pam.services.sshd.text = pkgs.lib.mkDefault( pkgs.lib.mkAfter "session optional ${pkgs.pam}/lib/security/pam_exec.so seteuid ${login_mail_alert}/bin/mail_alert.sh" );