fix(srv.nitter): use systemd's loadcredential instead

* this works around the requirement of setting ownership of the file

Changed files
+4 -1
systems
koumakan
services
proxies
+4 -1
systems/koumakan/services/proxies/nitter.nix
···
systemd.services.nitter = {
environment = {
-
NITTER_ACCOUNTS_FILE = "/etc/nitter/guest_accounts.json";
};
};
services.nginx.virtualHosts."nitter.soopy.moe" = _utils.mkSimpleProxy {
···
systemd.services.nitter = {
environment = {
+
NITTER_ACCOUNTS_FILE = "/run/credentials/nitter.service/guest_accounts.json";
};
+
serviceConfig.LoadCredential = [
+
"guest_accounts.json:/etc/nitter/guest_accounts.json"
+
];
};
services.nginx.virtualHosts."nitter.soopy.moe" = _utils.mkSimpleProxy {