about summary refs log tree commit diff
path: root/ops/modules/depot-replica.nix
diff options
context:
space:
mode:
authorVincent Ambo <mail@tazj.in>2022-07-11T11·02+0000
committertazjin <tazjin@tvl.su>2022-07-12T08·49+0000
commit39d589b84b6c84cddbb4ea0ac97486cdc4e2b187 (patch)
tree696e8307acc2408453e2b0e380ff3446376d376b /ops/modules/depot-replica.nix
parent4c25c29505aaf977e2a64b92bc023a1557da39d5 (diff)
fix(depot-replica): make the depot replica world readable r/4294
Change-Id: Idc0b5210793ab0d83b3ac99cf36d7f7f02a35a37
Reviewed-on: https://cl.tvl.fyi/c/depot/+/5931
Tested-by: BuildkiteCI
Reviewed-by: sterni <sternenseemann@systemli.org>
Diffstat (limited to 'ops/modules/depot-replica.nix')
-rw-r--r--ops/modules/depot-replica.nix2
1 files changed, 1 insertions, 1 deletions
diff --git a/ops/modules/depot-replica.nix b/ops/modules/depot-replica.nix
index f5f02a18a9fc..b71f10409a2b 100644
--- a/ops/modules/depot-replica.nix
+++ b/ops/modules/depot-replica.nix
@@ -33,7 +33,7 @@ in
       isSystemUser = true;
       createHome = true;
       home = cfg.path;
-      homeMode = "750"; # group can read depot
+      homeMode = "755"; # everyone can read depot
       openssh.authorizedKeys.keys = lib.singleton cfg.key;
       shell = pkgs.bashInteractive; # gerrit needs to run shell commands
     };