From e48c609796a9f819e75eb05b7f4833f2d442cee7 Mon Sep 17 00:00:00 2001 From: Benedikt Peetz Date: Sat, 12 Apr 2025 16:08:30 +0200 Subject: modules/stalwart-mail: Allow both nginx and stalwart-mail access to the cert This is needed for the http challenge (and for the potential to use nginx as a proxy in the future.) --- modules/by-name/co/constants/module.nix | 1 + 1 file changed, 1 insertion(+) (limited to 'modules/by-name/co/constants') diff --git a/modules/by-name/co/constants/module.nix b/modules/by-name/co/constants/module.nix index 946776b..743ac65 100644 --- a/modules/by-name/co/constants/module.nix +++ b/modules/by-name/co/constants/module.nix @@ -85,6 +85,7 @@ # Keep this sorted with `!sort --numeric-sort --key=2 --field-separator="="` systemd-coredump = 151; # matches systemd-coredump user resolvconf = 333; # This group is not matched to an user? + stalwart-mail-certificates = 338; # This group is used to connect nginx and stalwart-mail # The gid should match the uid. Thus should not be >= 400; }; -- cgit 1.4.1