secrets: let borg group read borg password

This commit is contained in:
Infinidoge 2024-04-14 09:26:31 -04:00
parent b561c223aa
commit e4e3301a96
Signed by: Infinidoge
SSH key fingerprint: SHA256:oAMyvotlNFraMmZmr+p6AxnNfW/GioTs1pOn3V4tQ7A

View file

@ -27,9 +27,10 @@ in
"infinidoge-password"
"root-password"
"binary-cache-private-key"
"borg-password"
"borg-ssh-key"
;
"borg-password" = secrets."borg-password" // { group = "borg"; mode = "440";};
}
(mkIf config.services.nginx.enable {
"inx.moe.pem" = withOwnerGroup "nginx" secrets."inx.moe.pem";