diff --git a/third_party/nixpkgs/patches/pomerium-fix.patch b/third_party/nixpkgs/patches/pomerium-fix.patch index 06f2878b5b..f425d75982 100644 --- a/third_party/nixpkgs/patches/pomerium-fix.patch +++ b/third_party/nixpkgs/patches/pomerium-fix.patch @@ -27,12 +27,3 @@ diff --git a/nixos/modules/services/web-servers/pomerium.nix b/nixos/modules/ser LoadCredential = optionals (cfg.useACMEHost != null) [ "fullchain.pem:/var/lib/acme/${cfg.useACMEHost}/fullchain.pem" "key.pem:/var/lib/acme/${cfg.useACMEHost}/key.pem" -@@ -119,7 +123,7 @@ in - before = [ "acme-finished-${cfg.useACMEHost}.target" ]; - after = [ "acme-${cfg.useACMEHost}.service" ]; - # Block reloading if not all certs exist yet. -- unitConfig.ConditionPathExists = [ "${certs.${cfg.useACMEHost}.directory}/fullchain.pem" ]; -+ unitConfig.ConditionPathExists = [ "${config.security.acme.certs.${cfg.useACMEHost}.directory}/fullchain.pem" ]; - serviceConfig = { - Type = "oneshot"; - TimeoutSec = 60;