From dcf8116f609d15113119f4afd620261160cfba77 Mon Sep 17 00:00:00 2001
From: Andrea Cimbalo <cimbalo@gmail.com>
Date: Sun, 2 Jul 2017 23:54:25 +0200
Subject: [PATCH] Serve fullchain

---
 roles/nginx/templates/base.j2 | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/roles/nginx/templates/base.j2 b/roles/nginx/templates/base.j2
index 0bf5639..f168ebc 100644
--- a/roles/nginx/templates/base.j2
+++ b/roles/nginx/templates/base.j2
@@ -3,7 +3,7 @@ server {
     listen [::]:443 ssl http2;
 
     # certs sent to the client in SERVER HELLO are concatenated in ssl_certificate
-    ssl_certificate /etc/letsencrypt/live/{{ server_fqdn }}/cert.pem;
+    ssl_certificate /etc/letsencrypt/live/{{ server_fqdn }}/fullchain.pem;
     ssl_certificate_key /etc/letsencrypt/live/{{ server_fqdn }}/privkey.pem;
     ssl_session_timeout 1d;
     ssl_session_cache shared:SSL:50m;