...

1 files changed, 6 insertions, 1 deletions

diff --git a/ymir.nix b/ymir.nix
index 28daf36f..3814761b 100644
--- a/ymir.nix
+++ b/ymir.nix
@@ -805,7 +805,12 @@ in rec {
     };
   };
 
-  systemd.services."acme-yggdrasil.li".requires = [ "nginx.service" ]; 
+  systemd.services."acme-yggdrasil.li" = {
+    requires = [ "nginx.service" ]; 
+    serviceConfig = {
+      ReadWritePaths = [ "/srv/www/acme" ];
+    };
+  };
   systemd.tmpfiles.rules
     = let mkAcmeDir = domain: "d /srv/www/acme 0775 root ssl 10d -";
       in map mkAcmeDir myDomains ++ [