From 40e7d5f09779863dbdf5bed687b3532a6d52937b Mon Sep 17 00:00:00 2001
From: Lucy Cifferello <12953208+elvece@users.noreply.github.com>
Date: Thu, 1 Jul 2021 17:39:58 -0400
Subject: [PATCH] add webroot flag to certbot renewal

---
 src/Lib/Ssl.hs | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/Lib/Ssl.hs b/src/Lib/Ssl.hs
index 0173af7..b7de3ed 100644
--- a/src/Lib/Ssl.hs
+++ b/src/Lib/Ssl.hs
@@ -51,6 +51,6 @@ renewSslCerts :: ReaderT RegistryCtx IO ()
 renewSslCerts = do
     domain      <- asks $ registryHostname . appSettings
     (cert, key) <- asks $ (sslCertLocation &&& sslKeyLocation) . appSettings
-    void . liftIO $ system [i|certbot renew|]
+    void . liftIO $ system [i|certbot renew --webroot|]
     void . liftIO $ system [i|cp /etc/letsencrypt/live/#{domain}/fullchain.pem #{cert}|]
     void . liftIO $ system [i|cp /etc/letsencrypt/live/#{domain}/privkey.pem #{key}|]