mdebray/tvl-depot
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

fix(depot-replica): make the depot replica world readable

Browse source 
Change-Id: Idc0b5210793ab0d83b3ac99cf36d7f7f02a35a37
Reviewed-on: https://cl.tvl.fyi/c/depot/+/5931
Tested-by: BuildkiteCI
Reviewed-by: sterni <sternenseemann@systemli.org>
This commit is contained in:
Vincent Ambo 2022-07-11 11:02:19 +00:00 committed by tazjin
parent 4c25c29505
commit 39d589b84b
1 changed files with 1 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
ops/modules/depot-replica.nix
View file

@ -33,7 +33,7 @@ in
isSystemUser = true; isSystemUser = true;
createHome = true; createHome = true;
home = cfg.path; home = cfg.path;
homeMode = "750"; # group can read depot homeMode = "755"; # everyone can read depot
openssh.authorizedKeys.keys = lib.singleton cfg.key; openssh.authorizedKeys.keys = lib.singleton cfg.key;
shell = pkgs.bashInteractive; # gerrit needs to run shell commands shell = pkgs.bashInteractive; # gerrit needs to run shell commands
}; };