Updated permission to allow grafana to touch eko's sqlite db, might need

to disable more hardening later
2025-08-03 19:01:46 +03:00
parent 5cd317c960
commit 16db472151
1 changed files with 2 additions and 2 deletions
--- a/nixosModules/eko.nix
+++ b/nixosModules/eko.nix
@@ -26,8 +26,8 @@
    ];

    # Allow grafana access to the sqlite db
-    users.users.eko.group = "grafana";
-    systemd.services.eko.serviceConfig.StateDirectoryMode = "0750";
+    users.users.eko.group = lib.mkForce "grafana";
+    systemd.services.eko.serviceConfig.StateDirectoryMode = lib.mkForce "0750";

    # Make sure acme module is active for the "kyren.codes" ssl cert
    acme.enable = true;