From a76cb7969d14bb0ea0f3ebdc0b2e79d140b58878 Mon Sep 17 00:00:00 2001
From: Gregor Kleen <gkleen@yggdrasil.li>
Date: Tue, 19 Oct 2021 19:07:10 +0200
Subject: ...

---
 ymir.nix | 7 ++++++-
 1 file changed, 6 insertions(+), 1 deletion(-)

diff --git a/ymir.nix b/ymir.nix
index 28daf36f..3814761b 100644
--- a/ymir.nix
+++ b/ymir.nix
@@ -805,7 +805,12 @@ in rec {
     };
   };
 
-  systemd.services."acme-yggdrasil.li".requires = [ "nginx.service" ]; 
+  systemd.services."acme-yggdrasil.li" = {
+    requires = [ "nginx.service" ]; 
+    serviceConfig = {
+      ReadWritePaths = [ "/srv/www/acme" ];
+    };
+  };
   systemd.tmpfiles.rules
     = let mkAcmeDir = domain: "d /srv/www/acme 0775 root ssl 10d -";
       in map mkAcmeDir myDomains ++ [
-- 
cgit v1.2.3