From 9b57654b31b902f4c585881420ec735d309d2de9 Mon Sep 17 00:00:00 2001
From: Antoine Eiche <lewo@abesis.fr>
Date: Wed, 1 Oct 2025 19:46:20 +0200
Subject: [PATCH] Only set acme.extraDomainNames when the certificate scheme is
 acme

Otherwise, certificate domains appear twice in the certificate, since
they are added by the acme module and the nginx module.
---
 mail-server/nginx.nix | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/mail-server/nginx.nix b/mail-server/nginx.nix
index 5433f03..0ed22ab 100644
--- a/mail-server/nginx.nix
+++ b/mail-server/nginx.nix
@@ -49,7 +49,7 @@ in
         };
 
         security.acme.certs."${cfg.acmeCertificateName}" = {
-          extraDomainNames = cfg.certificateDomains;
+          extraDomainNames = lib.mkIf (cfg.certificateScheme == "acme") cfg.certificateDomains;
           reloadServices = [
             "postfix.service"
             "${dovecotUnitName}.service"