Give dkim access to config files

2023-09-28 14:18:48 -07:00 · 2023-09-28 14:18:48 -07:00 · db63fc6e2a
commit db63fc6e2a
parent e132ba1a2a
1 changed files with 1 additions and 0 deletions
--- a/dkim.nix
+++ b/dkim.nix
@ -117,6 +117,7 @@ in {
              (ensureAllDkimCerts cfg.state-directory cfg.domains))
          ];
          ReadWritePaths = [ cfg.state-directory ];
+          ReadOnlyPaths = [ (dirOf keyTable) (dirOf signingTable) ];
        };
      };
    };