From e55094da3bf97dd83cc4734624395cc09a10761b Mon Sep 17 00:00:00 2001
From: Dominik Polakovics <dominik.polakovics@cloonar.com>
Date: Mon, 4 Dec 2023 16:04:47 +0100
Subject: [PATCH] try to fix unbound cert group

---
 hosts/fw.cloonar.com/modules/unbound.nix | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/hosts/fw.cloonar.com/modules/unbound.nix b/hosts/fw.cloonar.com/modules/unbound.nix
index 6981bd3..1024f78 100644
--- a/hosts/fw.cloonar.com/modules/unbound.nix
+++ b/hosts/fw.cloonar.com/modules/unbound.nix
@@ -133,17 +133,17 @@ in {
   services.unbound = {
     enable = true;
     settings = cfg // {
-      server = {
-        tls-cert-bundle = "/var/lib/acme/fw.cloonnar.com/fullchain.pem";
-      };
+      server.tls-cert-bundle = "/var/lib/acme/fw.cloonnar.com/fullchain.pem";
     }; 
   };
   security.acme.certs."fw.cloonar.com" = {
     domain = "fw.cloonar.com";
+    group = "unbound";
   };
 
   security.acme.certs."${domain}" = {
     domain = "${domain}";
+    group = "996";
   };
 
   containers.unbound = {