From c63b6b808c5620578b89e9166db7e316136715c4 Mon Sep 17 00:00:00 2001
From: Alexander Tomokhov <alexoundos@selfprivacy.org>
Date: Mon, 4 Dec 2023 13:22:27 +0400
Subject: [PATCH] acme: RestartSec = 15 * 60

---
 letsencrypt/resolve.nix | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/letsencrypt/resolve.nix b/letsencrypt/resolve.nix
index f1da07d..c3421cf 100644
--- a/letsencrypt/resolve.nix
+++ b/letsencrypt/resolve.nix
@@ -1,4 +1,4 @@
-{ config, pkgs, ... }:
+{ config, lib, ... }:
 let
   domain = config.selfprivacy.domain;
 in
@@ -10,6 +10,10 @@ in
           StartLimitBurst = 5;
           StartLimitIntervalSec = 5;
           Restart = "on-failure";
+          RestartSec =
+            if lib.versionOlder config.system.nixos.release "23.11"
+            then 15 * 60
+            else abort "since NixOS 23.11 (#266155) ACME systemd service restart intervals should have been fixed, thus no workarounds are needed";
         };
       };
     };