mdebray/tvl-depot
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

refactor(ops): Move irccat secret into agenix

Browse source 
The irccat module uses DynamicUser, so to grant permission to it a new
group has been added for irccat.

I have some vague memory of DynamicUser + Group not behaving as one
would expect, but we'll see what happens.

Change-Id: Iab9f6a3f1a53c4133b635458ce173250cc9a3fac
This commit is contained in:
Vincent Ambo 2021-12-10 15:49:11 +03:00
parent 002d183876
commit d4403638cf
4 changed files with 31 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

6
ops/machines/whitby/default.nix
View file

@ -221,6 +221,12 @@ in {
file = secretFile "clbot-ssh";
owner = "clbot";
};
irccat = {
file = secretFile "irccat";
mode = "0440";
group = "irccat";
};
};
# Automatically collect garbage from the Nix store.