From db63fc6e2a7d9d52c9729adee51b03bc136eb2d7 Mon Sep 17 00:00:00 2001
From: niten <niten@fudo.org>
Date: Thu, 28 Sep 2023 14:18:48 -0700
Subject: [PATCH] Give dkim access to config files

---
 dkim.nix | 1 +
 1 file changed, 1 insertion(+)

diff --git a/dkim.nix b/dkim.nix
index c4aedb9..eb5b9d4 100644
--- a/dkim.nix
+++ b/dkim.nix
@@ -117,6 +117,7 @@ in {
               (ensureAllDkimCerts cfg.state-directory cfg.domains))
           ];
           ReadWritePaths = [ cfg.state-directory ];
+          ReadOnlyPaths = [ (dirOf keyTable) (dirOf signingTable) ];
         };
       };
     };