From 5d849384bcd60e40429e1af8eb2c485485f4f331 Mon Sep 17 00:00:00 2001
From: Joe Carstairs <me@joeac.net>
Date: Tue, 7 Jul 2026 10:27:10 +0100
Subject: [PATCH] chown tls_certs

---
 make/tls.mk | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/make/tls.mk b/make/tls.mk
index e7c3f2c..919b86f 100644
--- a/make/tls.mk
+++ b/make/tls.mk
@@ -32,7 +32,8 @@ define obtain_or_renew_cert_cmd =
 sudo certbot certonly \
 	--nginx \
 	--cert-name $(subdomain).joeac.net \
-	--domain $(subst @.,,$(subdomain).)joeac.net
+	--domain $(subst @.,,$(subdomain).)joeac.net \
+	&& sudo chown -R joeac.net:joeac.net $(dir $(tls_cert))
 endef
 
 is_cert_expired = $(shell sudo certbot certificates --cert-name $(subdomain).joeac.net \