From 705f54203553e847288350888aa7966034e4e4dd Mon Sep 17 00:00:00 2001
From: Johannes Löthberg <johannes@kyriasis.com>
Date: Thu, 16 May 2024 20:24:47 +0000
Subject: Give prosody access to kyriasis.com cert

---
 theos/certs/init.sls         | 16 ++++++++--------
 theos/certs/kyriasis_com.sls | 10 ++++++++++
 2 files changed, 18 insertions(+), 8 deletions(-)

diff --git a/theos/certs/init.sls b/theos/certs/init.sls
index 82b7907..451d701 100644
--- a/theos/certs/init.sls
+++ b/theos/certs/init.sls
@@ -1,16 +1,16 @@
 include:
-  - .kyriasis_com
-  - .theos_kyriasis_com
-  - .xan_kyriasis_com
+  - .actual_kyriasis_com
+  - .gallery_remmy_io
   - .git_kyriasis_com
-  - .taskd_kyriasis_com
-  - .miniflux_kyriasis_com
   - .grafana_kyriasis_com
+  - .kyriasis_com
+  - .miniflux_kyriasis_com
   - .prometheus_kyriasis_com
-  - .repsys_kyriasis_com
   - .remmy_io
-  - .gallery_remmy_io
-  - .actual_kyriasis_com
+  - .repsys_kyriasis_com
+  - .taskd_kyriasis_com
+  - .theos_kyriasis_com
+  - .xan_kyriasis_com
 
 /etc/letsencrypt/archive:
   file.directory:
diff --git a/theos/certs/kyriasis_com.sls b/theos/certs/kyriasis_com.sls
index 68bb7ab..2d1b83a 100644
--- a/theos/certs/kyriasis_com.sls
+++ b/theos/certs/kyriasis_com.sls
@@ -27,4 +27,14 @@ kyriasis.com:
     - group: synapse
     - mode: 600
 
+prosody-access-kyriasis.com-cert:
+  acl.present:
+    - name: /etc/letsencrypt/archive/kyriasis.com/
+    - acl_type: user
+    - acl_name: prosody
+    - perms: r-x
+    - recurse: True
+    - require_in:
+      - acme: kyriasis.com
+
 # vim: set ft=yaml et:
-- 
cgit v1.2.3-70-g09d2