From 34b0a8ed516127e6bdbe5dbe1fa1070430e0a885 Mon Sep 17 00:00:00 2001
From: rnhmjoj <rnhmjoj@inventati.org>
Date: Tue, 27 Oct 2020 07:49:11 +0100
Subject: [PATCH] allow nginx access to *all* acme certs

---
 configuration.nix | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/configuration.nix b/configuration.nix
index dfa10d3..fdf21a3 100644
--- a/configuration.nix
+++ b/configuration.nix
@@ -176,7 +176,7 @@
 
   # Allow read access to ACME certificate
   # to specific (service) users.
-  users.groups."maxwell-ydns-eu".members = [ "murmur" "turnserver" ];
+  users.groups."maxwell-ydns-eu".members = [ "murmur" "turnserver" "nginx" ];
   users.groups."riot-maxwell-ydns-eu".members = [ "nginx" ];