git.iko.soy/typeable/nixpkgs
on master help sign in
nextcloud: use tmpfiles to create group-readable home

users.users.*.createHome makes home only owner-readable. This breaks nginx reading static assets from nextcloud's home, after a nixos-rebuild that did not restart nextcloud-setup. Closes #112639

commit956dab36a3a8691b851186e9579c7c64dd4aaed5 authorJörg Thalheim <joerg@thalheim.io> dateWed 10 Feb 2021, 11:03 (6 years ago) parent0ee3fb5
1 file changed+2−3
nixos/modules/services/web-apps/nextcloud.nix+2−3
nixos/modules/services/web-apps/nextcloud.nix+2−3
@@ -599,6 +599,8 @@ in {
599599 timerConfig.Unit = "nextcloud-cron.service";
600600 };
601601
602+ systemd.tmpfiles.rules = ["d ${cfg.home} 0750 nextcloud nextcloud"];
603+
602604 systemd.services = {
603605 # When upgrading the Nextcloud package, Nextcloud can report errors such as
604606 # "The files of the app [all apps in /var/lib/nextcloud/apps] were not replaced correctly"
@@ -720,8 +722,6 @@ in {
720722 before = [ "phpfpm-nextcloud.service" ];
721723 path = [ occ ];
722724 script = ''
723− chmod og+x ${cfg.home}
724−
725725 ${optionalString (c.dbpassFile != null) ''
726726 if [ ! -r "${c.dbpassFile}" ]; then
727727 echo "dbpassFile ${c.dbpassFile} is not readable by nextcloud:nextcloud! Aborting..."
@@ -814,7 +814,6 @@ in {
814814 users.users.nextcloud = {
815815 home = "${cfg.home}";
816816 group = "nextcloud";
817− createHome = true;
818817 isSystemUser = true;
819818 };
820819 users.groups.nextcloud.members = [ "nextcloud" config.services.nginx.user ];