From 508e9c0abde67e42a7dffae4d19475439f774d6b Mon Sep 17 00:00:00 2001
From: Gregor Kleen <gkleen@yggdrasil.li>
Date: Wed, 30 Sep 2015 21:10:07 +0200
Subject: Better spot for shadow perms

---
 ymir.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

(limited to 'ymir.nix')

diff --git a/ymir.nix b/ymir.nix
index 0a1c3410..09a0a965 100644
--- a/ymir.nix
+++ b/ymir.nix
@@ -122,9 +122,9 @@ in {
     members = [ "prosody"
               ];
   };
-  boot.postBootCommands = ''
+  system.activationScripts."shadow-perms" = ''
     chown root:shadow /etc/shadow
-    chmod 640 /etc/shadow
+    chmod 0640 /etc/shadow
   '';
   users.groups."xmpp" = {
     members = [ "gkleen"
-- 
cgit v1.2.3