From 2a282146107b7f5a0dad5a4a984648a9ce78a0ac Mon Sep 17 00:00:00 2001
From: "Ricardo (XenGi) Band" <email@ricardo.band>
Date: Thu, 4 Dec 2025 22:46:52 +0100
Subject: [PATCH] fix http challenge

---
 services/nginx.nix | 11 ++++++-----
 1 file changed, 6 insertions(+), 5 deletions(-)

diff --git a/services/nginx.nix b/services/nginx.nix
index e8c1f7b..f89d339 100644
--- a/services/nginx.nix
+++ b/services/nginx.nix
@@ -24,7 +24,8 @@ in
       quic = true;
       kTLS = true;
       forceSSL = true;
-      useACMEHost = fqdn;
+      #useACMEHost = fqdn;
+      enableACME = true;
       listen = [
         {
           addr = "0.0.0.0";
@@ -48,7 +49,7 @@ in
         }
       ];
       locations = {
-        "/.well-known/acme-challenge".root = config.security.acme.defaults.webroot;
+        #"/.well-known/acme-challenge".root = config.security.acme.defaults.webroot;
         "/".return = "418 \"I'm a Teapot!\"";
         "= /.well-known/matrix/client" = {
           return = "200 '{\"m.homeserver\": {\"base_url\": \"https://matrix.berlin.ccc.de\"}}'";
@@ -70,7 +71,7 @@ in
     };
   };
 
-  security.acme.certs."${fqdn}" = {
-    reloadServices = [ "nginx" ];
-  };
+  #security.acme.certs."${fqdn}" = {
+  #  reloadServices = [ "nginx" ];
+  #};
 }