From 5cd317c96085156652986fa2c0de1d5d611524a9 Mon Sep 17 00:00:00 2001
From: Kyren223 <kyren223@proton.me>
Date: Sun, 3 Aug 2025 18:58:49 +0300
Subject: [PATCH] Updated permission to allow grafana to touch eko's sqlite db,
 might need to disable more hardening later

---
 nixosModules/eko.nix | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/nixosModules/eko.nix b/nixosModules/eko.nix
index a5620a7..31e58b7 100644
--- a/nixosModules/eko.nix
+++ b/nixosModules/eko.nix
@@ -25,6 +25,10 @@
         "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIO7P9K9D5RkBk+JCRRS6AtHuTAc6cRpXfRfRMg/Kyren"
     ];
 
+    # Allow grafana access to the sqlite db
+    users.users.eko.group = "grafana";
+    systemd.services.eko.serviceConfig.StateDirectoryMode = "0750";
+
     # Make sure acme module is active for the "kyren.codes" ssl cert
     acme.enable = true;