From 5a519d3a48bba9ac999ef2352d38e5b888a6efc7 Mon Sep 17 00:00:00 2001
From: Max <max@privatevoid.net>
Date: Sun, 31 Dec 2023 04:02:51 +0100
Subject: [PATCH] cluster/services/certificates: setfacl on current directory

---
 cluster/services/certificates/internal-wildcard.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/cluster/services/certificates/internal-wildcard.nix b/cluster/services/certificates/internal-wildcard.nix
index 8e1c3ca..dca93b3 100644
--- a/cluster/services/certificates/internal-wildcard.nix
+++ b/cluster/services/certificates/internal-wildcard.nix
@@ -14,9 +14,9 @@ in
     dnsProvider = "exec";
     group = "nginx";
     postRun = ''
-      ${pkgs.acl}/bin/setfacl -Rb out/
+      ${pkgs.acl}/bin/setfacl -Rb .
       ${lib.concatStringsSep "\n" (
-        map (group: "${pkgs.acl}/bin/setfacl -Rm g:${group}:rX out/") extraGroups
+        map (group: "${pkgs.acl}/bin/setfacl -Rm g:${group}:rX .") extraGroups
       )}
     '';
   };