alioth/nixpkgs
3
0
Fork 0
forked from mirrors/nixpkgs
Code Releases Activity

nixos/acme: Fix allowKeysForGroup not applying immediately (#72056)

Browse source 
nixos/acme: Fix allowKeysForGroup not applying immediately
This commit is contained in:
Silvan Mosberger 2019-11-13 23:51:34 +01:00 committed by GitHub
parent f5dd1191f8 5532065d06
commit c482b65abe
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
1 changed files with 6 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

6
nixos/modules/security/acme.nix
View file

@ -224,6 +224,12 @@ in
environment.REQUESTS_CA_BUNDLE = "/etc/ssl/certs/ca-certificates.crt"; environment.REQUESTS_CA_BUNDLE = "/etc/ssl/certs/ca-certificates.crt";
serviceConfig = { serviceConfig = {
Type = "oneshot"; Type = "oneshot";
# With RemainAfterExit the service is considered active even
# after the main process having exited, which means when it
# gets changed, the activation phase restarts it, meaning
# the permissions of the StateDirectory get adjusted
# according to the specified group
RemainAfterExit = true;
SuccessExitStatus = [ "0" "1" ]; SuccessExitStatus = [ "0" "1" ];
User = data.user; User = data.user;
Group = data.group; Group = data.group;