Fix acme scripts starting before bind

diff --git a/modules/private/certificates.nix b/modules/private/certificates.nix
index b9c0860bc08c53b583697f9539df1309ad1728b6..c564d34f17832d784875ef60ea0950b9e23a4198 100644 (file)
--- a/modules/private/certificates.nix
+++ b/modules/private/certificates.nix
@@ -60,6 +60,7 @@
       ) config.security.acme.certs //
     lib.attrsets.mapAttrs' (k: data:
       lib.attrsets.nameValuePair "acme-${k}" {
+        after = lib.mkAfter [ "bind.service" ];
         serviceConfig.ExecStartPre =
           let
             script = pkgs.writeScript "acme-pre-start" ''