From 676693c5f61ed38450ad15b2e8c7ffb2c3a500b0 Mon Sep 17 00:00:00 2001
From: Gregor Kleen <gkleen@yggdrasil.li>
Date: Tue, 22 Feb 2022 11:16:42 +0100
Subject: ...

---
 hosts/surtr/tls/default.nix | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

(limited to 'hosts/surtr/tls')

diff --git a/hosts/surtr/tls/default.nix b/hosts/surtr/tls/default.nix
index 936aa106..7e6b370c 100644
--- a/hosts/surtr/tls/default.nix
+++ b/hosts/surtr/tls/default.nix
@@ -94,7 +94,10 @@ in {
       defaults = {
         email = "phikeebaogobaegh@141.li";
         keyType = "rsa4096"; # we don't like NIST curves
-        # extraLegoFlags = ["--preferred-chain" "ISRG Root X1"];
+        extraLegoFlags = [
+          "--always-deactivate-authorizations" "true"
+          # "--preferred-chain" "ISRG Root X1"
+        ];
       };
       certs =
         let
-- 
cgit v1.2.3