From ac8edd6665e0bb976cfbfe8c46a59a3d54c77cef Mon Sep 17 00:00:00 2001
From: osbm <osbm@osbm.dev>
Date: Tue, 4 Nov 2025 15:19:33 +0300
Subject: [PATCH] nginx should take care of the acme folder

---
 modules/nixos/services/nginx.nix | 19 +++++++++++++++++++
 1 file changed, 19 insertions(+)

diff --git a/modules/nixos/services/nginx.nix b/modules/nixos/services/nginx.nix
index 1e5960e..266c566 100644
--- a/modules/nixos/services/nginx.nix
+++ b/modules/nixos/services/nginx.nix
@@ -20,5 +20,24 @@
         defaults.email = "osbm@osbm.dev";
       };
     })
+
+    (lib.mkIf
+      (
+        config.osbmModules.services.nginx.enable
+        && config.osbmModules.hardware.disko.zfs.root.impermanenceRoot
+      )
+      {
+        environment.persistence."/persist" = {
+          directories = [
+            {
+              directory = "/var/lib/acme";
+              user = "acme";
+              group = "acme";
+              mode = "0750";
+            }
+          ];
+        };
+      }
+    )
   ];
 }