From 8d26c87292538f6f2b6ecc9e186926922d878cce Mon Sep 17 00:00:00 2001
From: Gregor Kleen <gkleen@yggdrasil.li>
Date: Tue, 22 Feb 2022 17:52:53 +0100
Subject: surtr: tls: keep authorizations

---
 hosts/surtr/tls/default.nix | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/hosts/surtr/tls/default.nix b/hosts/surtr/tls/default.nix
index 9969aa5f..5118b1ad 100644
--- a/hosts/surtr/tls/default.nix
+++ b/hosts/surtr/tls/default.nix
@@ -51,7 +51,7 @@ in {
         keyType = "rsa4096"; # we don't like NIST curves
         extraLegoRenewFlags = [
           # "--preferred-chain" "ISRG Root X1"
-          "--always-deactivate-authorizations" "true"
+          # "--always-deactivate-authorizations" "true"
         ];
         extraLegoRunFlags = config.security.acme.defaults.extraLegoRenewFlags;
       };
-- 
cgit v1.2.3