mikael/nixfiles-emily
1
0
Fork 0
forked from emily/nixfiles
Code Pull requests Activity

Change hydra ssh key permissions

Browse source
This commit is contained in:
emily 2024-07-23 19:47:05 +02:00
parent d76655faa9
commit c59b2826f7
Signed by untrusted user: emily
GPG key ID: F6F4C66207FCF995
1 changed files with 3 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

3
config/services/hydra/default.nix
View file

@ -7,7 +7,10 @@
sopsFile = ../../../secrets/services/hydra.yaml; sopsFile = ../../../secrets/services/hydra.yaml;
}; };
sops.secrets."services/hydra/id_ed25519_hydra" = { sops.secrets."services/hydra/id_ed25519_hydra" = {
path = "/var/lib/hydra/.ssh/id_ed25519";
owner = "hydra-queue-runner"; owner = "hydra-queue-runner";
group = "hydra";
mode = "0440";
sopsFile = ../../../secrets/services/hydra.yaml; sopsFile = ../../../secrets/services/hydra.yaml;
}; };
kyouma.deployment.auto-upgrade.cache = "daemon"; kyouma.deployment.auto-upgrade.cache = "daemon";