From 3de711a1350961f062df25f69b7198c7f5a05cde Mon Sep 17 00:00:00 2001
From: schererleander <leander@schererleander.de>
Date: Sat, 25 Jul 2026 23:17:56 +0200
Subject: fix(ssl): restore static wildcard certificate

---
 modules/services/nextcloud.nix | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

(limited to 'modules/services/nextcloud.nix')

diff --git a/modules/services/nextcloud.nix b/modules/services/nextcloud.nix
index 65f0b15..b8d2adc 100644
--- a/modules/services/nextcloud.nix
+++ b/modules/services/nextcloud.nix
@@ -65,7 +65,8 @@
       services.nginx.virtualHosts = {
         "cloud.schererleander.de" = {
           forceSSL = true;
-          useACMEHost = "schererleander.de";
+          sslCertificate = config.sops.secrets."cert_fullchain".path;
+          sslCertificateKey = config.sops.secrets."cert_private".path;
         };
       };
 
-- 
cgit v1.3.1