diff options
| author | Nadrieril <nadrieril@gmail.com> | 2017-09-27 15:59:38 +0100 |
|---|---|---|
| committer | Nadrieril <nadrieril@gmail.com> | 2017-12-08 22:18:57 +0000 |
| commit | 573719e32899aa2f8ec2f850b6d8ec56597e1718 (patch) | |
| tree | 611ace2cd78632c2b0c49557ba76d2291d6456ae /nixos/modules/services/networking/firefox/sync-server.nix | |
| parent | f90b3dcf05249f88063f8023cea2c9849ca4a1e6 (diff) | |
| download | nixlib-573719e32899aa2f8ec2f850b6d8ec56597e1718.tar nixlib-573719e32899aa2f8ec2f850b6d8ec56597e1718.tar.gz nixlib-573719e32899aa2f8ec2f850b6d8ec56597e1718.tar.bz2 nixlib-573719e32899aa2f8ec2f850b6d8ec56597e1718.tar.lz nixlib-573719e32899aa2f8ec2f850b6d8ec56597e1718.tar.xz nixlib-573719e32899aa2f8ec2f850b6d8ec56597e1718.tar.zst nixlib-573719e32899aa2f8ec2f850b6d8ec56597e1718.zip | |
firefox.syncserver service: Fix permissions
Diffstat (limited to 'nixos/modules/services/networking/firefox/sync-server.nix')
| -rw-r--r-- | nixos/modules/services/networking/firefox/sync-server.nix | 7 |
1 files changed, 6 insertions, 1 deletions
diff --git a/nixos/modules/services/networking/firefox/sync-server.nix b/nixos/modules/services/networking/firefox/sync-server.nix index 974914ebe1eb..c0b1673b6c34 100644 --- a/nixos/modules/services/networking/firefox/sync-server.nix +++ b/nixos/modules/services/networking/firefox/sync-server.nix @@ -142,16 +142,21 @@ in preStart = '' if ! test -e ${cfg.privateConfig}; then - mkdir -m 700 -p $(dirname ${cfg.privateConfig}) + mkdir -p $(dirname ${cfg.privateConfig}) echo > ${cfg.privateConfig} '[syncserver]' + chmod 600 ${cfg.privateConfig} echo >> ${cfg.privateConfig} "secret = $(head -c 20 /dev/urandom | sha1sum | tr -d ' -')" fi + chmod 600 ${cfg.privateConfig} + chmod 755 $(dirname ${cfg.privateConfig}) chown ${user}:${group} ${cfg.privateConfig} + '' + optionalString (cfg.sqlUri == defaultSqlUri) '' if ! test -e $(dirname ${defaultDbLocation}); then mkdir -m 700 -p $(dirname ${defaultDbLocation}) chown ${user}:${group} $(dirname ${defaultDbLocation}) fi + # Move previous database file if it exists oldDb="/var/db/firefox-sync-server.db" if test -f $oldDb; then |