From c2ad6bf5a1fc9ccc4f557cc703bd643e4440ddfb Mon Sep 17 00:00:00 2001
From: niten <niten@fudo.org>
Date: Sat, 30 Sep 2023 19:54:46 -0700
Subject: [PATCH] State directory doesn't need to be modifiable by mail-user

---
 dovecot.nix | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/dovecot.nix b/dovecot.nix
index 33caa73..027e51d 100644
--- a/dovecot.nix
+++ b/dovecot.nix
@@ -196,7 +196,7 @@ in {
 
     systemd = {
       tmpfiles.rules = [
-        "d ${cfg.state-directory}        0751 ${cfg.mail-user} ${cfg.mail-group} - -"
+        "d ${cfg.state-directory}        0711 root root - -"
         "d ${cfg.mail-directory}         0750 ${cfg.mail-user} ${cfg.mail-group} - -"
         "d ${cfg.state-directory}/sieves 0750 ${config.services.dovecot2.user} ${config.services.dovecot2.group} - -"
       ];