From f1fcda810a41c6e2c03ebe715fa794515fbc2728 Mon Sep 17 00:00:00 2001
From: Luke Granger-Brown <hg@lukegb.com>
Date: Sat, 12 Mar 2022 23:39:45 +0000
Subject: [PATCH] vault-agent-acme: disable

---
 ops/nixos/lib/vault-agent-acme.nix | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/ops/nixos/lib/vault-agent-acme.nix b/ops/nixos/lib/vault-agent-acme.nix
index feb048667d..746b9fe74c 100644
--- a/ops/nixos/lib/vault-agent-acme.nix
+++ b/ops/nixos/lib/vault-agent-acme.nix
@@ -170,7 +170,8 @@ in
 
   config = {
     my.vault.settings = {
-      template = mkBefore acmeCertificatesTemplate;
+      # TODO: lukegb: figure out how to not get this to DoS Let's Encrypt.
+      #template = mkBefore acmeCertificatesTemplate;
     };
 
     systemd = optionalAttrs config.my.vault.enable {