nixos/sing-box: set umask 0077 when generating configuration file

2023-06-27 16:08:55 +08:00 · 2023-06-27 16:08:55 +08:00 · e52b401a95
commit e52b401a95
parent 8295574499
1 changed files with 1 additions and 0 deletions
--- a/nixos/modules/services/networking/sing-box.nix
+++ b/nixos/modules/services/networking/sing-box.nix
@ -56,6 +56,7 @@ in

    systemd.services.sing-box = {
      preStart = ''
+        umask 0077
        mkdir -p /etc/sing-box
        ${utils.genJqSecretsReplacementSnippet cfg.settings "/etc/sing-box/config.json"}
      '';