about summary refs log tree commit diff
path: root/ops/machines/whitby/default.nix
diff options
context:
space:
mode:
authorVincent Ambo <mail@tazj.in>2021-12-10T12·49+0300
committerVincent Ambo <mail@tazj.in>2021-12-10T13·13+0300
commitd4403638cf02d544d87a0ce9101ee5b18ff09d96 (patch)
tree6ae1aac862a9057291f5e7e2e33ecf6230ba01ff /ops/machines/whitby/default.nix
parent002d183876e67338498bd4fbae9928af4fb5694c (diff)
refactor(ops): Move irccat secret into agenix r/3184
The irccat module uses DynamicUser, so to grant permission to it a new
group has been added for irccat.

I have some vague memory of DynamicUser + Group not behaving as one
would expect, but we'll see what happens.

Change-Id: Iab9f6a3f1a53c4133b635458ce173250cc9a3fac
Diffstat (limited to 'ops/machines/whitby/default.nix')
-rw-r--r--ops/machines/whitby/default.nix6
1 files changed, 6 insertions, 0 deletions
diff --git a/ops/machines/whitby/default.nix b/ops/machines/whitby/default.nix
index 8cec05284a..381980fd37 100644
--- a/ops/machines/whitby/default.nix
+++ b/ops/machines/whitby/default.nix
@@ -221,6 +221,12 @@ in {
         file = secretFile "clbot-ssh";
         owner = "clbot";
       };
+
+      irccat = {
+        file = secretFile "irccat";
+        mode = "0440";
+        group = "irccat";
+      };
     };
 
   # Automatically collect garbage from the Nix store.