From 0144849f678f9ff611c2a2f1538a455bb8ebdf69 Mon Sep 17 00:00:00 2001
From: Oliver Matthews <oliver@codersoffortune.net>
Date: Tue, 14 Apr 2015 12:34:26 +0000
Subject: Allow allowing local access to mysql socket

---
 nixos/modules/services/databases/mysql.nix | 11 ++++++++++-
 1 file changed, 10 insertions(+), 1 deletion(-)

(limited to 'nixos/modules/services')

diff --git a/nixos/modules/services/databases/mysql.nix b/nixos/modules/services/databases/mysql.nix
index 05b13492052a..30d7a77c58b8 100644
--- a/nixos/modules/services/databases/mysql.nix
+++ b/nixos/modules/services/databases/mysql.nix
@@ -77,6 +77,14 @@ in
         description = "Location of the file which stores the PID of the MySQL server";
       };
 
+      enableSocketAccess = mkOption {
+        type = types.bool;
+        default = true;
+        description = ''
+          Whether to grant local processes access to the mysqld socket.
+        '';
+      };
+
       extraOptions = mkOption {
         default = "";
         example = ''
@@ -180,7 +188,8 @@ in
             chown -R ${cfg.user} ${cfg.pidDir}
 
             # Make the socket directory
-            mkdir -m 0700 -p /run/mysqld
+            mkdir -p /run/mysqld
+            chmod ${if cfg.enableSocketAccess then "0755" else "0700"} /run/mysqld
             chown -R ${cfg.user} /run/mysqld
           '';
 
-- 
cgit 1.4.1