At least on NixOS 17.09, it appears the certs are in `/var/lib/acme/${host}` and not `/var/lib/acme/acme-challenge/${host}` and the private key is called `key.pem` and not `privkey.pem` ```diff diff --git a/mail-server/common.nix b/mail-server/common.nix index 0d15ce7..63fa3d7 100644 --- a/mail-server/common.nix +++ b/mail-server/common.nix @@ -26,7 +26,7 @@ in else if cfg.certificateScheme == 2 then "${cfg.certificateDirectory}/cert-${cfg.domain}.pem" else if cfg.certificateScheme == 3 - then "/var/lib/acme/acme-challenge/${cfg.hostPrefix}.${cfg.domain}/fullchain.pem" + then "/var/lib/acme/${cfg.hostPrefix}.${cfg.domain}/fullchain.pem" else throw "Error: Certificate Scheme must be in { 1, 2, 3 }"; # key :: PATH @@ -35,6 +35,6 @@ in else if cfg.certificateScheme == 2 then "${cfg.certificateDirectory}/key-${cfg.domain}.pem" else if cfg.certificateScheme == 3 - then "/var/lib/acme/acme-challenge/${cfg.hostPrefix}.${cfg.domain}/privkey.pem" + then "/var/lib/acme/${cfg.hostPrefix}.${cfg.domain}/key.pem" else throw "Error: Certificate Scheme must be in { 1, 2, 3 }"; } ```