From aed4b3a744cc17cc49cdb795bd9691310e312f48 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Nicolas=20=E2=80=9CNiols=E2=80=9D=20Jeannerod?=
 <nicolas.jeannerod@tweag.io>
Date: Mon, 30 Sep 2024 13:57:10 +0200
Subject: [PATCH] No certificate for Garage web root domain

---
 services/fediversity/garage.nix | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/services/fediversity/garage.nix b/services/fediversity/garage.nix
index 0dd0d7f1..c334afc1 100644
--- a/services/fediversity/garage.nix
+++ b/services/fediversity/garage.nix
@@ -159,10 +159,9 @@ in
       };
     };
 
-    services.nginx.virtualHosts.${fedicfg.web.rootDomain} = {
+    services.nginx.virtualHosts.${fedicfg.web.domainForBucket "pixelfed"} = {
       forceSSL = true;
       enableACME = true;
-      serverAliases = lib.mapAttrsToList (bucket: _: fedicfg.web.domainForBucket bucket) cfg.ensureBuckets; ## TODO: use wildcard certificates?
       locations."/" = {
         proxyPass = "http://localhost:3902";
         extraConfig = ''