Use acme directory config rather than hardcoding the value

[perso/Immae/Config/Nix.git] / modules / private / databases / postgresql.nix

diff --git a/modules/private/databases/postgresql.nix b/modules/private/databases/postgresql.nix
index 26242a8e02a2a25b00c321f3dae922ea5c7d0159..8c36d84e0ccbab15e68b555c4d46008861fd5ffc 100644 (file)
--- a/modules/private/databases/postgresql.nix
+++ b/modules/private/databases/postgresql.nix
@@ -73,8 +73,8 @@ in {
         lc_time = 'en_US.UTF-8'
         default_text_search_config = 'pg_catalog.english'
         ssl = on
-        ssl_cert_file = '/var/lib/acme/postgresql/fullchain.pem'
-        ssl_key_file = '/var/lib/acme/postgresql/key.pem'
+        ssl_cert_file = '${config.security.acme.directory}/postgresql/fullchain.pem'
+        ssl_key_file = '${config.security.acme.directory}/postgresql/key.pem'
         '';
       authentication = ''
         local  all     postgres                                ident