nicknase27/nicksOs
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

proper permissions for secrets

Browse Source
This commit is contained in:
nicknase27
2026-07-25 23:54:51 +02:00
parent ea736b53e2
commit cea7eb35ac
4 changed files with 8 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
modules/services/caddy.nix
+2
View File
@@ -81,5 +81,7 @@
age.secrets.caddy = { age.secrets.caddy = {
file = ../../secrets/caddy.age; file = ../../secrets/caddy.age;
path = "/run/secrets/caddy.env"; path = "/run/secrets/caddy.env";
owner = "caddy";
group = "caddy";
}; };
} }
modules/services/gitea.nix
+2 -1
View File
@@ -24,6 +24,7 @@
age.secrets.gitea-db = { age.secrets.gitea-db = {
file = ../../secrets/gitea-db.age; file = ../../secrets/gitea-db.age;
path = "/run/secrets/gitea-db"; path = "/run/secrets/gitea-db";
mode = "777"; owner = "gitea";
group = "gitea";
}; };
} }
modules/services/navidrome.nix
+2
View File
@@ -45,6 +45,8 @@
age.secrets.navidrome = { age.secrets.navidrome = {
file = ../../secrets/navidrome.age; file = ../../secrets/navidrome.age;
path = "/run/secrets/navidrome.env"; path = "/run/secrets/navidrome.env";
owner = "navidrome";
group = "navidrome";
}; };
systemd.services = { systemd.services = {
modules/services/vaultwarden.nix
+2
View File
@@ -21,5 +21,7 @@
age.secrets.vaultwarden = { age.secrets.vaultwarden = {
file = ../../secrets/vaultwarden.age; file = ../../secrets/vaultwarden.age;
path = "/run/secrets/vaultwarden.env"; path = "/run/secrets/vaultwarden.env";
owner = "vaultwarden";
group = "vaultwarden";
}; };
} }