From e1996d7bdaf4eafdb85690079b9e02b25dc14e4f Mon Sep 17 00:00:00 2001
From: Alyssa Ross <hi@alyssa.is>
Date: Sun, 19 Jan 2025 13:23:27 +0100
Subject: [PATCH] nixos/public-inbox: bind key and cert paths

Otherwise, these can't be accessed by the service.
---
 nixos/modules/services/mail/public-inbox.nix | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/nixos/modules/services/mail/public-inbox.nix b/nixos/modules/services/mail/public-inbox.nix
index b1e4daa9f0e4..d709b0aac9de 100644
--- a/nixos/modules/services/mail/public-inbox.nix
+++ b/nixos/modules/services/mail/public-inbox.nix
@@ -81,6 +81,10 @@ let
             "${config.i18n.glibcLocales}"
           ]
           ++ mapAttrsToList (name: inbox: inbox.description) cfg.inboxes
+          ++ filter (x: x != null) [
+            cfg.${proto}.cert or null
+            cfg.${proto}.key or null
+          ]
           ++
             # Without confinement the whole Nix store
             # is made available to the service