diff options
| author | Vincent Ambo <mail@tazj.in> | 2022-07-11T11·02+0000 |
|---|---|---|
| committer | tazjin <tazjin@tvl.su> | 2022-07-12T08·49+0000 |
| commit | 39d589b84b6c84cddbb4ea0ac97486cdc4e2b187 (patch) | |
| tree | 696e8307acc2408453e2b0e380ff3446376d376b /ops | |
| parent | 4c25c29505aaf977e2a64b92bc023a1557da39d5 (diff) | |
fix(depot-replica): make the depot replica world readable r/4294
Change-Id: Idc0b5210793ab0d83b3ac99cf36d7f7f02a35a37 Reviewed-on: https://cl.tvl.fyi/c/depot/+/5931 Tested-by: BuildkiteCI Reviewed-by: sterni <sternenseemann@systemli.org>
Diffstat (limited to 'ops')
| -rw-r--r-- | ops/modules/depot-replica.nix | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/ops/modules/depot-replica.nix b/ops/modules/depot-replica.nix index f5f02a18a9..b71f10409a 100644 --- a/ops/modules/depot-replica.nix +++ b/ops/modules/depot-replica.nix @@ -33,7 +33,7 @@ in isSystemUser = true; createHome = true; home = cfg.path; - homeMode = "750"; # group can read depot + homeMode = "755"; # everyone can read depot openssh.authorizedKeys.keys = lib.singleton cfg.key; shell = pkgs.bashInteractive; # gerrit needs to run shell commands }; |