From 15e6e1ff6f9d8cbebdfe560b0aba57f0601aba48 Mon Sep 17 00:00:00 2001
From: Uli Baum <xeji@cat3.de>
Date: Sun, 2 Sep 2018 01:35:59 +0200
Subject: [PATCH] nixos/nginx: fix type of sslTrustedCertificate option

The option was added in 1251b34b5bbcd11a7a2974df7bada5d6d47b985d
with type `types.path` but default `null`, so eval failed with
the default setting. This broke the acme and certmgr tests.

cc: @vincentbernat @fpletz
---
 nixos/modules/services/web-servers/nginx/vhost-options.nix | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/nixos/modules/services/web-servers/nginx/vhost-options.nix b/nixos/modules/services/web-servers/nginx/vhost-options.nix
index 6954d932eed4..8e2b8819e71b 100644
--- a/nixos/modules/services/web-servers/nginx/vhost-options.nix
+++ b/nixos/modules/services/web-servers/nginx/vhost-options.nix
@@ -130,7 +130,7 @@ with lib;
     };
 
     sslTrustedCertificate = mkOption {
-      type = types.path;
+      type = types.nullOr types.path;
       default = null;
       example = "/var/root.cert";
       description = "Path to root SSL certificate for stapling and client certificates.";