From a6b4b9ae520c4af0809d274c05266f950674231c Mon Sep 17 00:00:00 2001
From: Sebastian Klemke <3669903+packet23@users.noreply.github.com>
Date: Mon, 31 Jan 2022 07:36:23 +0100
Subject: [PATCH] Removed ssl_trusted_certificate configuration setting from
 nginx.

Resolves an nginx startup issue when letsencrypt or
mail-letsencrypt is enabled.

Fixes #2199
---
 core/nginx/conf/tls.conf            | 1 -
 towncrier/newsfragments/2199.bugfix | 1 +
 2 files changed, 1 insertion(+), 1 deletion(-)
 create mode 100644 towncrier/newsfragments/2199.bugfix

diff --git a/core/nginx/conf/tls.conf b/core/nginx/conf/tls.conf
index f663bfd2..4372c5af 100644
--- a/core/nginx/conf/tls.conf
+++ b/core/nginx/conf/tls.conf
@@ -3,7 +3,6 @@ ssl_certificate_key {{ TLS[1] }};
 {% if TLS_FLAVOR in ['letsencrypt','mail-letsencrypt'] %}
 ssl_certificate {{ TLS[2] }};
 ssl_certificate_key {{ TLS[3] }};
-ssl_trusted_certificate /etc/ssl/certs/ca-cert-DST_Root_CA_X3.pem;
 {% endif %}
 ssl_session_timeout 1d;
 ssl_session_tickets off;
diff --git a/towncrier/newsfragments/2199.bugfix b/towncrier/newsfragments/2199.bugfix
new file mode 100644
index 00000000..94d28888
--- /dev/null
+++ b/towncrier/newsfragments/2199.bugfix
@@ -0,0 +1 @@
+Removed `ssl_trusted_certificate` configuration setting from nginx. Fixes an issue with nginx when letsencrypt or mail-letsencrypt is used.