secrets: add hydra group to binary-cache-private-key where needed

This commit is contained in:
Infinidoge 2024-05-20 21:17:25 -04:00
parent 2b6241bbcd
commit 3a34bbdadc
Signed by: Infinidoge
SSH key fingerprint: SHA256:EMoPe5e2dO0gEvtBb2xkZTz5dkyL0rBmuiGTKG5s96E

View file

@ -26,11 +26,11 @@ in
inherit (secrets)
"infinidoge-password"
"root-password"
"binary-cache-private-key"
"borg-ssh-key"
;
"borg-password" = secrets."borg-password" // { group = "borg"; mode = "440";};
"binary-cache-private-key" = secrets.binary-cache-private-key // lib.optionalAttrs config.services.hydra.enable { group = "hydra"; mode = "440"; };
}
(mkIf config.services.nginx.enable {
inherit (secrets) "cloudflare";