fix(depot-replica): make the depot replica world readable

Change-Id: Idc0b5210793ab0d83b3ac99cf36d7f7f02a35a37
Reviewed-on: https://cl.tvl.fyi/c/depot/+/5931
Tested-by: BuildkiteCI
Reviewed-by: sterni <sternenseemann@systemli.org>
This commit is contained in:
Vincent Ambo 2022-07-11 11:02:19 +00:00 committed by tazjin
parent 4c25c29505
commit 39d589b84b

View file

@ -33,7 +33,7 @@ in
isSystemUser = true;
createHome = true;
home = cfg.path;
homeMode = "750"; # group can read depot
homeMode = "755"; # everyone can read depot
openssh.authorizedKeys.keys = lib.singleton cfg.key;
shell = pkgs.bashInteractive; # gerrit needs to run shell commands
};