privatevoid.net/depot
1
1
Fork 0
Code Issues 25 Pull requests 2 Projects 3 Releases Packages Wiki Activity Actions

cluster/services/certificates: setfacl on current directory

Browse source
This commit is contained in:
Max Headroom 2023-12-31 04:02:51 +01:00
parent 30e926a654
commit 5a519d3a48
1 changed files with 2 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
cluster/services/certificates/internal-wildcard.nix
View file

@ -14,9 +14,9 @@ in
dnsProvider = "exec"; dnsProvider = "exec";
group = "nginx"; group = "nginx";
postRun = '' postRun = ''
${pkgs.acl}/bin/setfacl -Rb out/ ${pkgs.acl}/bin/setfacl -Rb .
${lib.concatStringsSep "\n" ( ${lib.concatStringsSep "\n" (
map (group: "${pkgs.acl}/bin/setfacl -Rm g:${group}:rX out/") extraGroups map (group: "${pkgs.acl}/bin/setfacl -Rm g:${group}:rX .") extraGroups
)} )}
''; '';
}; };