From deedd007624519240170578d812963d1a4e92f8a Mon Sep 17 00:00:00 2001
From: ashisgreat22 <dev@ashisgreat.xyz>
Date: Wed, 18 Mar 2026 22:11:08 +0100
Subject: [PATCH] Automate certificate path injection in AdGuard Home config

---
 modules/adguard.nix | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/modules/adguard.nix b/modules/adguard.nix
index 147039e..cd329f7 100644
--- a/modules/adguard.nix
+++ b/modules/adguard.nix
@@ -145,7 +145,11 @@ in
       serviceConfig.SystemCallFilter = lib.mkForce []; # Allow yq-go to run its syscalls
       preStart = lib.mkAfter ''
         if [ -f /var/lib/private/AdGuardHome/AdGuardHome.yaml ]; then
-          ${pkgs.yq-go}/bin/yq -i '.filters = load("/run/adguardhome_filters.json").filters' /var/lib/private/AdGuardHome/AdGuardHome.yaml
+          ${pkgs.yq-go}/bin/yq -i '
+            .filters = load("/run/adguardhome_filters.json").filters |
+            .tls.certificate_path = "/var/lib/acme/${cfg.domain}/fullchain.pem" |
+            .tls.private_key_path = "/var/lib/acme/${cfg.domain}/key.pem"
+          ' /var/lib/private/AdGuardHome/AdGuardHome.yaml
         fi
       '';
     };