summaryrefslogtreecommitdiff
path: root/pkgs/development/python-modules/rangehttpserver
diff options
context:
space:
mode:
authorNathan Henrie <nate@n8henrie.com>2025-05-27 12:38:24 -0600
committerNathan Henrie <nate@n8henrie.com>2025-05-27 12:38:24 -0600
commit18dc3dd0b9977e17c11f449b57188aca6261f454 (patch)
treef7d1c9a703f099d11a7ff5aabcb6152e14f4dc27 /pkgs/development/python-modules/rangehttpserver
parentcdd9f0bc0cd29a48650d1197b4688b2d1a64d1d4 (diff)
nixos/zwave-js: allow non-world-readable secrets
Currently the module's `DyanmicUser` does not exist at build time and therefore this module's secrets file can't be assigned appropriate (e.g. 0400) permissions without additional configuration. This change uses `LoadCredential` to read the secrets file with elevated privileges and place then into the service-specific credentials directory, where the dynamic user can access them. This will allow using standard approaches to nix secrets (such as sops, agenix), which by default provide an out-of-store `0400 root:root` file. Fixes https://github.com/NixOS/nixpkgs/issues/408780
Diffstat (limited to 'pkgs/development/python-modules/rangehttpserver')
0 files changed, 0 insertions, 0 deletions