From be26969d9bc99c2e164012d212d4c94dd95fb979 Mon Sep 17 00:00:00 2001
From: Oliver Davies <oliver@oliverdavies.dev>
Date: Sun, 27 Apr 2025 20:58:35 +0100
Subject: [PATCH] Allow the nginx user to access SSL certificates

Fixes this error:

> Failed assertions:
> - Certificate oliverdavies.uk (group=acme) must be readable by
service(s) nginx.service (user=nginx groups=nginx),
nginx-config-reload.service (user=root groups=)
---
 hosts/nixedo/modules/nginx/default.nix | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/hosts/nixedo/modules/nginx/default.nix b/hosts/nixedo/modules/nginx/default.nix
index 0975dfbf..3e7c4fac 100644
--- a/hosts/nixedo/modules/nginx/default.nix
+++ b/hosts/nixedo/modules/nginx/default.nix
@@ -47,5 +47,7 @@ in
     };
   };
 
+  users.users.${config.services.nginx.user}.extraGroups = [ "acme" ];
+
   imports = [ ./www.oliverdavies.uk.nix ];
 }