From 7f98dca782b50e685ee49415a126a32b1e0cb4d8 Mon Sep 17 00:00:00 2001
From: Alexander Ried <ried@mytum.de>
Date: Tue, 6 Sep 2016 17:39:46 +0200
Subject: security.acme: the client really needs networking

Actually this can be improved since the client only needs network
connectivity if it needs to renew the certificate.
---
 nixos/modules/security/acme.nix | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

(limited to 'nixos/modules/security')

diff --git a/nixos/modules/security/acme.nix b/nixos/modules/security/acme.nix
index 3dac558b9537d..45e8f64046b06 100644
--- a/nixos/modules/security/acme.nix
+++ b/nixos/modules/security/acme.nix
@@ -166,7 +166,8 @@ in
                           ++ concatLists (mapAttrsToList (name: root: [ "-d" (if root == null then name else "${name}:${root}")]) data.extraDomains);
                 acmeService = {
                   description = "Renew ACME Certificate for ${cert}";
-                  after = [ "network.target" ];
+                  after = [ "network.target" "network-online.target" ];
+                  wants = [ "network-online.target" ];
                   serviceConfig = {
                     Type = "oneshot";
                     SuccessExitStatus = [ "0" "1" ];
-- 
cgit 1.4.1