soopy.moe / gensokyo
nixos config
fork atom

fix(srv.nitter): use systemd's loadcredential instead

* this works around the requirement of setting ownership of the file

Cassie Cheung 64f90f88 1c89492f

options
unified split
Changed files
+4 -1
systems
koumakan
services
proxies
nitter.nix
+4 -1
systems/koumakan/services/proxies/nitter.nix 
···

       
15

       
15

       
 

       



     

       
16

       
16

       
 

       
  systemd.services.nitter = {


     

       
17

       
17

       
 

       
    environment = {


     

       
18

       

       
-

       
      NITTER_ACCOUNTS_FILE = "/etc/nitter/guest_accounts.json";


     

       

       
18

       
+

       
      NITTER_ACCOUNTS_FILE = "/run/credentials/nitter.service/guest_accounts.json";


     

       
19

       
19

       
 

       
    };


     

       

       
20

       
+

       
    serviceConfig.LoadCredential = [


     

       

       
21

       
+

       
      "guest_accounts.json:/etc/nitter/guest_accounts.json"


     

       

       
22

       
+

       
    ];


     

       
20

       
23

       
 

       
  };


     

       
21

       
24

       
 

       



     

       
22

       
25

       
 

       
  services.nginx.virtualHosts."nitter.soopy.moe" = _utils.mkSimpleProxy {