From 10a96825960fc2d5465e9b4992c33941c8bd0c64 Mon Sep 17 00:00:00 2001
From: Horsemans <horsemans@horsemans.online>
Date: Sun, 31 Mar 2019 16:58:28 +0000
Subject: [PATCH] ssl_trusted_certificate should point to chain.pem if we're
 demonstrating LetsEncrypt:
 https://community.letsencrypt.org/t/howto-ocsp-stapling-for-nginx/13611/5

---
 installation/pleroma.nginx | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/installation/pleroma.nginx b/installation/pleroma.nginx
index a24bb0e61..a0e91f464 100644
--- a/installation/pleroma.nginx
+++ b/installation/pleroma.nginx
@@ -31,7 +31,7 @@ server {
     listen 443 ssl http2;
     ssl_session_timeout 5m;
 
-    ssl_trusted_certificate   /etc/letsencrypt/live/example.tld/fullchain.pem;
+    ssl_trusted_certificate   /etc/letsencrypt/live/example.tld/chain.pem;
     ssl_certificate           /etc/letsencrypt/live/example.tld/fullchain.pem;
     ssl_certificate_key       /etc/letsencrypt/live/example.tld/privkey.pem;