From 9bc39babe0ccdd3f8334a7e08af510ecb65e6a94 Mon Sep 17 00:00:00 2001
From: Linnnus <linnnus@users.noreply.github.com>
Date: Sat, 30 Sep 2023 13:13:27 +0200
Subject: Fix permissions for duksebot + create home/working directory

---
 services/duksebot/default.nix | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

(limited to 'services')

diff --git a/services/duksebot/default.nix b/services/duksebot/default.nix
index 109de3a..5130497 100644
--- a/services/duksebot/default.nix
+++ b/services/duksebot/default.nix
@@ -25,12 +25,16 @@ in
       description = "Runs daily dukse reminder";
       group = "duksebot";
       isSystemUser = true;
+      home = "/srv/duksebot";
+      createHome = true;
     };
     users.groups.duksebot = { };
 
     age.secrets.duksebot-env = {
       file = ../../secrets/duksebot.env.age;
-      # TODO: configure permissions
+      owner = config.users.users.duksebot.name;
+      group = config.users.users.duksebot.group;
+      mode = "0440";
     };
 
     # Create a service which simply runs script. This will be invoked by our timer.
-- 
cgit v1.2.3