From c1cf0f0aacfdd48a5c757ae010082a73e6a3a8bd Mon Sep 17 00:00:00 2001
From: Irene Knapp <ireneista@internetsafetylabs.org>
Date: Thu, 29 Jan 2026 21:59:05 -0800
Subject: remove the acme preliminary-selfsigned option

in nixos 25.11 it's now the only supported behavior, so we don't need the option

Force-Push: config
Change-Id: Id6a82e7b6631569e8d75bdf35a5a9391575326cd
---
 services/frontend/haproxy.nix | 1 -
 1 file changed, 1 deletion(-)

(limited to 'services/frontend/haproxy.nix')

diff --git a/services/frontend/haproxy.nix b/services/frontend/haproxy.nix
index 8bef462..44c2b0f 100644
--- a/services/frontend/haproxy.nix
+++ b/services/frontend/haproxy.nix
@@ -10,7 +10,6 @@ in
     # you're doing before messing with it.
     security.acme = {
       acceptTerms = true;
-      preliminarySelfsigned = true;
 
       defaults = {
         email = config.smalltech.adminEmail;
-- 
cgit 1.4.1