From 39d589b84b6c84cddbb4ea0ac97486cdc4e2b187 Mon Sep 17 00:00:00 2001 From: Vincent Ambo Date: Mon, 11 Jul 2022 11:02:19 +0000 Subject: fix(depot-replica): make the depot replica world readable Change-Id: Idc0b5210793ab0d83b3ac99cf36d7f7f02a35a37 Reviewed-on: https://cl.tvl.fyi/c/depot/+/5931 Tested-by: BuildkiteCI Reviewed-by: sterni --- ops/modules/depot-replica.nix | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'ops/modules') diff --git a/ops/modules/depot-replica.nix b/ops/modules/depot-replica.nix index f5f02a18a9fc..b71f10409a2b 100644 --- a/ops/modules/depot-replica.nix +++ b/ops/modules/depot-replica.nix @@ -33,7 +33,7 @@ in isSystemUser = true; createHome = true; home = cfg.path; - homeMode = "750"; # group can read depot + homeMode = "755"; # everyone can read depot openssh.authorizedKeys.keys = lib.singleton cfg.key; shell = pkgs.bashInteractive; # gerrit needs to run shell commands }; -- cgit 1.4.1