From: Ismaël Bouya <ismael.bouya@normalesup.org>
Date: Mon, 15 Apr 2019 22:04:06 +0000 (+0200)
Subject: Fix apache certificate chain containing the cert in double
X-Git-Tag: nur_publish~148
X-Git-Url: https://git.immae.eu/?p=perso%2FImmae%2FConfig%2FNix.git;a=commitdiff_plain;h=dfb0e6df5ca2e045b45f2dce0a254b7444fb277f

Fix apache certificate chain containing the cert in double
---

diff --git a/nixops/modules/websites/default.nix b/nixops/modules/websites/default.nix
index f820c83..9782e68 100644
--- a/nixops/modules/websites/default.nix
+++ b/nixops/modules/websites/default.nix
@@ -8,7 +8,7 @@ let
       enableSSL = true;
       sslServerCert = "/var/lib/acme/${vhostConf.certName}/cert.pem";
       sslServerKey = "/var/lib/acme/${vhostConf.certName}/key.pem";
-      sslServerChain = "/var/lib/acme/${vhostConf.certName}/fullchain.pem";
+      sslServerChain = "/var/lib/acme/${vhostConf.certName}/chain.pem";
       logFormat = "combinedVhost";
       listen = map (ip: { inherit ip; port = 443; }) cfg.ips;
       hostName = builtins.head vhostConf.hosts;