From 09de4198ea68db1dbc60eee626cd184a9e6f03cb Mon Sep 17 00:00:00 2001
From: lassulus <lass@aidsballs.de>
Date: Mon, 8 Aug 2016 10:53:48 +0200
Subject: l 1 prism: handle lassul.us cert via group

---
 lass/1systems/prism.nix | 9 ++++++++-
 1 file changed, 8 insertions(+), 1 deletion(-)

(limited to 'lass/1systems')

diff --git a/lass/1systems/prism.nix b/lass/1systems/prism.nix
index 1bc8d5744..9da261ed4 100644
--- a/lass/1systems/prism.nix
+++ b/lass/1systems/prism.nix
@@ -188,9 +188,16 @@ in {
             "fullchain.pem"
             "full.pem"
           ];
-          user = "ejabberd";
+          allowKeysForGroup = true;
+          group = "lasscert";
         };
       };
+      users.groups.lasscert.members = [
+        "dovecot2"
+        "ejabberd"
+        "exim"
+        "nginx"
+      ];
       krebs.nginx.servers."lassul.us" = {
         server-names = [ "lassul.us" ];
         locations = [
-- 
cgit v1.2.3