BoomMicrophone/nixpkgs-suyu
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

nixos/pretix: make state directory world-readable

Browse source 
Pretix creates static files in its state directory, that nginx needs to
serve, so locking down the permissions that hard is not going to work.
This commit is contained in:
Martin Weinelt 2024-03-16 23:39:31 +01:00
parent 7431fec51f
commit 2b003c0269
No known key found for this signature in database
GPG key ID: 87C1E9888F856759
1 changed files with 2 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

3
nixos/modules/services/web-apps/pretix.nix
View file

@ -468,6 +468,7 @@ in
StateDirectory = [
"pretix"
];
StateDirectoryMode = "0755";
CacheDirectory = "pretix";
LogsDirectory = "pretix";
WorkingDirectory = cfg.settings.pretix.datadir;
@ -506,7 +507,7 @@ in
"~@privileged"
"@chown"
];
UMask = "0077";
UMask = "0022";
};
};
in {