cluster/services/certificates: setfacl on current directory

This commit is contained in:
Max Headroom 2023-12-31 04:02:51 +01:00
parent 30e926a654
commit 5a519d3a48

View file

@ -14,9 +14,9 @@ in
dnsProvider = "exec";
group = "nginx";
postRun = ''
${pkgs.acl}/bin/setfacl -Rb out/
${pkgs.acl}/bin/setfacl -Rb .
${lib.concatStringsSep "\n" (
map (group: "${pkgs.acl}/bin/setfacl -Rm g:${group}:rX out/") extraGroups
map (group: "${pkgs.acl}/bin/setfacl -Rm g:${group}:rX .") extraGroups
)}
'';
};