mirror of
https://github.com/ilyakooo0/nixpkgs.git
synced 2024-11-17 06:06:13 +03:00
nixos/pretix: make state directory world-readable
Pretix creates static files in its state directory, that nginx needs to serve, so locking down the permissions that hard is not going to work.
This commit is contained in:
parent
7431fec51f
commit
2b003c0269
@ -468,6 +468,7 @@ in
|
||||
StateDirectory = [
|
||||
"pretix"
|
||||
];
|
||||
StateDirectoryMode = "0755";
|
||||
CacheDirectory = "pretix";
|
||||
LogsDirectory = "pretix";
|
||||
WorkingDirectory = cfg.settings.pretix.datadir;
|
||||
@ -506,7 +507,7 @@ in
|
||||
"~@privileged"
|
||||
"@chown"
|
||||
];
|
||||
UMask = "0077";
|
||||
UMask = "0022";
|
||||
};
|
||||
};
|
||||
in {
|
||||
|
Loading…
Reference in New Issue
Block a user