nixos/ddclient: don't store config world-readable
commit2febc7dd79653114eae54e27c9be215fe53b7ce5
authorJörg Thalheim <joerg@thalheim.io>
dateSun 9 Jan 2022, 08:33 (5 years ago)
parentd856f24
nixos/modules/services/networking/ddclient.nix+1−1
@@ -29,7 +29,7 @@ let
2929 configFile = if (cfg.configFile != null) then cfg.configFile else configFile';
3030
3131 preStart = ''
32− install ${configFile} /run/${RuntimeDirectory}/ddclient.conf
32+ install --owner ddclient -m600 ${configFile} /run/${RuntimeDirectory}/ddclient.conf
3333 ${lib.optionalString (cfg.configFile == null) (if (cfg.passwordFile != null) then ''
3434 password=$(printf "%q" "$(head -n 1 "${cfg.passwordFile}")")
3535 sed -i "s|^password=$|password=$password|" /run/${RuntimeDirectory}/ddclient.conf