diff options
| author | Nathan Henrie <nate@n8henrie.com> | 2025-05-27 12:38:24 -0600 |
|---|---|---|
| committer | Nathan Henrie <nate@n8henrie.com> | 2025-05-27 12:38:24 -0600 |
| commit | 18dc3dd0b9977e17c11f449b57188aca6261f454 (patch) | |
| tree | f7d1c9a703f099d11a7ff5aabcb6152e14f4dc27 /pkgs/development/python-modules/rangehttpserver | |
| parent | cdd9f0bc0cd29a48650d1197b4688b2d1a64d1d4 (diff) | |
nixos/zwave-js: allow non-world-readable secrets
Currently the module's `DyanmicUser` does not exist at build time and therefore this module's secrets file can't be assigned appropriate (e.g. 0400) permissions without additional configuration.
This change uses `LoadCredential` to read the secrets file with elevated privileges and place then into the service-specific credentials directory, where the dynamic user can access them.
This will allow using standard approaches to nix secrets (such as sops, agenix), which by default provide an out-of-store `0400 root:root` file.
Fixes https://github.com/NixOS/nixpkgs/issues/408780
Diffstat (limited to 'pkgs/development/python-modules/rangehttpserver')
0 files changed, 0 insertions, 0 deletions
