From f614ee571358f48091cdfb2f3e7d1554f3fe1c14 Mon Sep 17 00:00:00 2001
From: s-prechtl <stefan@tague.at>
Date: Mon, 22 Dec 2025 13:50:29 +0100
Subject: [PATCH] feat: acme

---
 hosts/hitsugibune/mail.nix | 9 +++++++--
 1 file changed, 7 insertions(+), 2 deletions(-)

diff --git a/hosts/hitsugibune/mail.nix b/hosts/hitsugibune/mail.nix
index f0a5c99..26eb825 100644
--- a/hosts/hitsugibune/mail.nix
+++ b/hosts/hitsugibune/mail.nix
@@ -28,6 +28,11 @@
     # down nginx and opens port 80.
     x509.useACMEHost = config.mailserver.fqdn;
   };
-  security.acme.acceptTerms = true;
-  security.acme.defaults.email = "stefan@tague.at";
+  security.acme = {
+    acceptTerms = true;
+    defaults.email = "stefan@tague.at";
+    certs.${config.mailserver.fqdn} = {
+      webroot = "/var/lib/acme/acme-challenges";
+    };
+  };
 }