lukegb/depot
1
0
Fork 0
Code Issues 1 Pull requests Projects Packages Activity Actions

3p/nixpkgs: fix pomerium-fix

Browse source
This commit is contained in:
Luke Granger-Brown 2021-04-10 23:44:19 +00:00
parent 4707c69469
commit c552ff053b
1 changed files with 0 additions and 9 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

9
third_party/nixpkgs/patches/pomerium-fix.patch vendored
View file

@ -27,12 +27,3 @@ diff --git a/nixos/modules/services/web-servers/pomerium.nix b/nixos/modules/ser
LoadCredential = optionals (cfg.useACMEHost != null) [ LoadCredential = optionals (cfg.useACMEHost != null) [
"fullchain.pem:/var/lib/acme/${cfg.useACMEHost}/fullchain.pem" "fullchain.pem:/var/lib/acme/${cfg.useACMEHost}/fullchain.pem"
"key.pem:/var/lib/acme/${cfg.useACMEHost}/key.pem" "key.pem:/var/lib/acme/${cfg.useACMEHost}/key.pem"
@@ -119,7 +123,7 @@ in
before = [ "acme-finished-${cfg.useACMEHost}.target" ];
after = [ "acme-${cfg.useACMEHost}.service" ];
# Block reloading if not all certs exist yet.
- unitConfig.ConditionPathExists = [ "${certs.${cfg.useACMEHost}.directory}/fullchain.pem" ];
+ unitConfig.ConditionPathExists = [ "${config.security.acme.certs.${cfg.useACMEHost}.directory}/fullchain.pem" ];
serviceConfig = {
Type = "oneshot";
TimeoutSec = 60;