···192 ++ data.extraLegoRenewFlags
193 );
19400000000195 in {
196 inherit accountHash cert selfsignedDeps;
197···287 "acme/.lego/${cert}/${certDir}"
288 "acme/.lego/accounts/${accountHash}"
289 ];
00290291 # Needs to be space separated, but can't use a multiline string because that'll include newlines
292 BindPaths = [
···192 ++ data.extraLegoRenewFlags
193 );
194195+ # We need to collect all the ACME webroots to grant them write
196+ # access in the systemd service.
197+ webroots =
198+ lib.remove null
199+ (lib.unique
200+ (builtins.map
201+ (certAttrs: certAttrs.webroot)
202+ (lib.attrValues config.security.acme.certs)));
203 in {
204 inherit accountHash cert selfsignedDeps;
205···295 "acme/.lego/${cert}/${certDir}"
296 "acme/.lego/accounts/${accountHash}"
297 ];
298+299+ ReadWritePaths = commonServiceConfig.ReadWritePaths ++ webroots;
300301 # Needs to be space separated, but can't use a multiline string because that'll include newlines
302 BindPaths = [
···1{ mkDerivation, lib, fetchFromGitHub, cmake
2-, qtbase, qttools, sqlite, wrapGAppsHook }:
34mkDerivation rec {
5 pname = "sqlitebrowser";
···16 # but qscintilla is currently in a bit of a mess as some consumers expect a
17 # -qt4 or -qt5 prefix while others do not.
18 # We *really* should get that cleaned up.
19- buildInputs = [ qtbase sqlite ];
2021 nativeBuildInputs = [ cmake qttools wrapGAppsHook ];
00002223 meta = with lib; {
24 description = "DB Browser for SQLite";
···1{ mkDerivation, lib, fetchFromGitHub, cmake
2+, qtbase, qttools, sqlcipher, wrapGAppsHook }:
34mkDerivation rec {
5 pname = "sqlitebrowser";
···16 # but qscintilla is currently in a bit of a mess as some consumers expect a
17 # -qt4 or -qt5 prefix while others do not.
18 # We *really* should get that cleaned up.
19+ buildInputs = [ qtbase sqlcipher ];
2021 nativeBuildInputs = [ cmake qttools wrapGAppsHook ];
22+23+ cmakeFlags = [
24+ "-Dsqlcipher=1"
25+ ];
2627 meta = with lib; {
28 description = "DB Browser for SQLite";