diff options
| author | Mel <einebeere@gmail.com> | 2024-12-29 22:57:11 +0100 |
|---|---|---|
| committer | Mel <einebeere@gmail.com> | 2024-12-29 22:57:11 +0100 |
| commit | a5d23c80aee2e93436dc2ee09f3710975958d2dc (patch) | |
| tree | 1691fd6b1b9138240bd5bb338dda1f278e4ff341 /configuration/specimen.nix | |
| parent | d5ce2d93fd9be2200745c1d5954330efc5080f28 (diff) | |
| download | specimen-a5d23c80aee2e93436dc2ee09f3710975958d2dc.tar.zst specimen-a5d23c80aee2e93436dc2ee09f3710975958d2dc.zip | |
Create system user for specimen service, and allow it to read name secret
Signed-off-by: Mel <einebeere@gmail.com>
Diffstat (limited to 'configuration/specimen.nix')
| -rw-r--r-- | configuration/specimen.nix | 3 |
1 files changed, 3 insertions, 0 deletions
diff --git a/configuration/specimen.nix b/configuration/specimen.nix index a20d4ab..53732b9 100644 --- a/configuration/specimen.nix +++ b/configuration/specimen.nix @@ -3,6 +3,9 @@ { age.secrets.name = { file = ../secrets/name.age; + owner = "specimen"; + group = "specimen"; + mode = "440"; }; services.specimen = { |