Commit cf546b0b authored by Sarah Brofeldt's avatar Sarah Brofeldt Committed by github-actions[bot]
Browse files

nixos/devpi-server: fix loading credentials as DynamicUser 

(cherry picked from commit 4d4571b2)
parent 39ffb04f

nixos/modules/services/misc/devpi-server.nix

+6 −2
Original line number Diff line number Diff line
@@ -74,8 +74,9 @@ in 
      # have 0600 permissions.

      preStart =

        ''

          cp ${cfg.secretFile} ${runtimeDir}/${secretsFileName}

          chmod 0600 ${runtimeDir}/*${secretsFileName}

          ${optionalString (!isNull cfg.secretFile)

            "install -Dm 0600 \${CREDENTIALS_DIRECTORY}/devpi-secret ${runtimeDir}/${secretsFileName}"

          }



          if [ -f ${serverDir}/.nodeinfo ]; then

            # already initialized the package index, exit gracefully
@@ -85,6 +86,9 @@ in 
        + strings.optionalString cfg.replica "--role=replica --master-url=${cfg.primaryUrl}";



      serviceConfig = {

        LoadCredential = lib.mkIf (! isNull cfg.secretFile) [

          "devpi-secret:${cfg.secretFile}"

        ];

        Restart = "always";

        ExecStart =

          let