summaryrefslogtreecommitdiff
path: root/ymir.nix
diff options
context:
space:
mode:
authorGregor Kleen <gkleen@yggdrasil.li>2021-11-21 15:18:52 +0100
committerGregor Kleen <gkleen@yggdrasil.li>2021-11-21 15:18:52 +0100
commitefe0c0169626f509938c479e29191b15a36834b4 (patch)
tree04b0e0378d15e6b36a1cf49e82e3b1921f840d27 /ymir.nix
parent93a06a1ee43938fce732bb7ea23b6c18d06e4d16 (diff)
downloadnixos-efe0c0169626f509938c479e29191b15a36834b4.tar
nixos-efe0c0169626f509938c479e29191b15a36834b4.tar.gz
nixos-efe0c0169626f509938c479e29191b15a36834b4.tar.bz2
nixos-efe0c0169626f509938c479e29191b15a36834b4.tar.xz
nixos-efe0c0169626f509938c479e29191b15a36834b4.zip
ymir: ...
Diffstat (limited to 'ymir.nix')
-rw-r--r--ymir.nix5
1 files changed, 3 insertions, 2 deletions
diff --git a/ymir.nix b/ymir.nix
index ee540b59..cf8f43a6 100644
--- a/ymir.nix
+++ b/ymir.nix
@@ -813,14 +813,15 @@ in rec {
813 systemd.services."acme-yggdrasil.li" = { 813 systemd.services."acme-yggdrasil.li" = {
814 requires = [ "nginx.service" ]; 814 requires = [ "nginx.service" ];
815 serviceConfig = { 815 serviceConfig = {
816 ReadWritePaths = [ "/srv/www/acme" "/tmp/webdav" ]; 816 ReadWritePaths = [ "/srv/www/acme" ];
817 RuntimeDirectory = [ "nginx/webdav" ];
818 RuntimeDirectoryMode = "0700";
817 }; 819 };
818 }; 820 };
819 systemd.tmpfiles.rules 821 systemd.tmpfiles.rules
820 = let mkAcmeDir = domain: "d /srv/www/acme 0775 root ssl 10d -"; 822 = let mkAcmeDir = domain: "d /srv/www/acme 0775 root ssl 10d -";
821 in map mkAcmeDir myDomains ++ [ 823 in map mkAcmeDir myDomains ++ [
822 "L /etc/nixos - - - - /root/nixos" 824 "L /etc/nixos - - - - /root/nixos"
823 "d /tmp/webdav 0700 nginx nginx 1h"
824 ]; 825 ];
825 826
826 services.uucp = { 827 services.uucp = {