From 438eeaf80115a4839d3b39fcd751dc0af8a400cf Mon Sep 17 00:00:00 2001
From: Lorenz Leutgeb <lorenz@leutgeb.xyz>
Date: Tue, 9 Jun 2026 15:10:16 +0200
Subject: [PATCH] os/mixin/common/security/acme: Disable ARI

---
 os/mixin/common.nix | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/os/mixin/common.nix b/os/mixin/common.nix
index 372dc89..435ae04 100644
--- a/os/mixin/common.nix
+++ b/os/mixin/common.nix
@@ -30,7 +30,10 @@
 
   security = {
     acme = {
-      defaults.email = "team@${config.networking.domain}";
+      defaults = {
+        email = "team@${config.networking.domain}";
+        extraLegoRenewFlags = ["--ari-disable"]; # Until all certificates were renewed by "team@radicle.dev".
+      };
       acceptTerms = true;
     };
     sudo.wheelNeedsPassword = false;