proper permissions for secrets

modules/services/caddy.nix

@@ -81,5 +81,7 @@
   age.secrets.caddy = {
     file = ../../secrets/caddy.age;
     path = "/run/secrets/caddy.env";
+    owner = "caddy";
+    group = "caddy";
   };
 }

modules/services/gitea.nix

@@ -24,6 +24,7 @@
   age.secrets.gitea-db = {
     file = ../../secrets/gitea-db.age;
     path = "/run/secrets/gitea-db";
-    mode = "777";
+    owner = "gitea";
+    group = "gitea";
   };
 }

modules/services/navidrome.nix

@@ -45,6 +45,8 @@
   age.secrets.navidrome = {
     file = ../../secrets/navidrome.age;
     path = "/run/secrets/navidrome.env";
+    owner = "navidrome";
+    group = "navidrome";
   };
 
   systemd.services = {

modules/services/vaultwarden.nix

@@ -21,5 +21,7 @@
   age.secrets.vaultwarden = {
     file = ../../secrets/vaultwarden.age;
     path = "/run/secrets/vaultwarden.env";
+    owner = "vaultwarden";
+    group = "vaultwarden";
   };
 }