Yuriy Taraday 28ba9e2c27 nixos/acme: Set /var/lib/acme permissions to 755 ... It was being created with the default home permissions of 700, and then set to 755 at runtime by something either some script or systemd as part of service startup. It worked fine without sysusers, but when it's enabed with: systemd.sysusers.enable = true; systemd-tmpfiles is resetting permissions on each activation, which breaks, for example, nginx reload, because it cannot load certificates anymore, because it doesn't have any access to `/var/lib/acme`. Fix this by setting `homeMode = "755";` explicitely so that it's set to the final value from the beginning. (cherry picked from commit 64a6e8292a)		2024-11-27 13:52:09 +00:00
..
default.md	treewide: Fix all Nix ASTs in all markdown files	2024-03-28 09:28:12 +01:00
default.nix	nixos/acme: Set /var/lib/acme permissions to 755	2024-11-27 13:52:09 +00:00
mk-cert-ownership-assertion.nix	nixos/web-servers: assert ACME cert access via service user and groups	2024-11-07 20:19:12 -05:00