...

1 files changed, 5 insertions, 2 deletions

diff --git a/hosts/surtr/http.nix b/hosts/surtr/http.nix
index 032b1fa5..6edc1466 100644
--- a/hosts/surtr/http.nix
+++ b/hosts/surtr/http.nix
@@ -50,7 +50,7 @@
       virtualHosts = {
         "webdav.141.li" = {
           forceSSL = true;
-          sslCertificate = "${config.security.acme.certs."webdav.141.li".directory}/fullchain.pem";
+          sslCertificate = "/run/credentials/nginx.service/webdav.141.li.pem";
           sslCertificateKey = "/run/credentials/nginx.service/webdav.141.li.key.pem";
           locations."/" = {
             proxyPass = "http://webdav/";
@@ -69,7 +69,10 @@
     systemd.services.nginx = {
       preStart = lib.mkForce config.services.nginx.preStart;
       serviceConfig = {
-        LoadCredential = [ "webdav.141.li.key.pem:${config.security.acme.certs."webdav.141.li".directory}/key.pem" ];
+        LoadCredential = [
+          "webdav.141.li.key.pem:${config.security.acme.certs."webdav.141.li".directory}/key.pem"
+          "webdav.141.li.pem:${config.security.acme.certs."webdav.141.li".directory}/fullchain.pem"
+        ];
       };
     };
   };