nix/lib
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Make sure dkim has access to key path

Browse Source
This commit is contained in:
niten 2023-07-30 09:17:16 -07:00
parent 8b3f771c23
commit cb039ceabd
1 changed files with 12 additions and 10 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

22
lib/fudo/mail/dkim.nix
View File

@ -99,17 +99,19 @@ in {
}; };
}; };
systemd.services.opendkim = { systemd = {
preStart = lib.mkForce createAllCerts; tmpfiles.rules = [
serviceConfig = { "d '${cfg.dkim.key-directory}' - ${config.services.opendkim.user} ${config.services.opendkim.group} - -"
ExecStart = lib.mkForce ];
"${cfg.dkim.package}/bin/opendkim ${escapeShellArgs args}"; services.opendkim = {
PermissionsStartOnly = lib.mkForce false; preStart = lib.mkForce createAllCerts;
serviceConfig = {
ExecStart = lib.mkForce
"${cfg.dkim.package}/bin/opendkim ${escapeShellArgs args}";
PermissionsStartOnly = lib.mkForce false;
ReadWritePaths = [ cfg.dkim.key-directory ];
};
}; };
}; };
systemd.tmpfiles.rules = [
"d '${cfg.dkim.key-directory}' - ${config.services.opendkim.user} ${config.services.opendkim.group} - -"
];
}; };
} }