From b8a62165e4f3dd6a35ebad0dcaea0971d4323735 Mon Sep 17 00:00:00 2001
From: Alejandro Soto <alejandro@34project.org>
Date: Fri, 10 Feb 2023 12:17:09 -0600
Subject: env/users: enable IMAP TLS

---
 env/acme/default.nix | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

(limited to 'env/acme')

diff --git a/env/acme/default.nix b/env/acme/default.nix
index 779b4e2..9b3db80 100644
--- a/env/acme/default.nix
+++ b/env/acme/default.nix
@@ -22,6 +22,11 @@ in
       defaults = {
         email = "security@${config.networking.domain}";
         renewInterval = "weekly";
+
+        webroot =
+          if config.security.acme.defaults.dnsProvider == null
+          then "/var/lib/acme/acme-challenge"
+          else null;
       };
 
       certs =
@@ -31,7 +36,6 @@ in
           certConfig = domains: {
             domain = domains.main;
             extraDomainNames = domainSort (attrValues (filterAttrs (k: _: k != "main") domains));
-            webroot = "/var/lib/acme/acme-challenge";
           };
         in
         mapAttrs'
-- 
cgit v1.2.3