...

1 files changed, 5 insertions, 1 deletions

diff --git a/ymir.nix b/ymir.nix
index 8d5f9e62..1853affa 100644
--- a/ymir.nix
+++ b/ymir.nix
@@ -835,7 +835,6 @@ in rec {
   security.wrappers = { "newgrp".source = "${pkgs.shadow}/bin/newgrp"; };
 
   security.acme = {
-    acceptTerms = true;
     certs = {
       "yggdrasil.li" = {
         allowKeysForGroup = true;
@@ -851,6 +850,11 @@ in rec {
   };
 
   systemd.services."acme-yggdrasil.li".requires = [ "nginx.service" ]; 
+  systemd.services."acme-yggdrasil.li".preStart
+    = let mkDir = domain: ''
+            install -d -g ssl -o acme -m 2750 /srv/www/acme/${domain}
+          '';
+       in concatStringsSep "\n" (map mkDir myDomains);
 
   services.uucp = {
     enable = true;