From 69ad36257c48c70cfbee9e4c71efb6ea17fcfa88 Mon Sep 17 00:00:00 2001
From: Kyren223 <kyren223@proton.me>
Date: Thu, 21 Aug 2025 12:31:17 +0300
Subject: [PATCH] Allow gitea group to read email password

---
 nixosModules/stalwart.nix | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/nixosModules/stalwart.nix b/nixosModules/stalwart.nix
index 677db45..5079596 100644
--- a/nixosModules/stalwart.nix
+++ b/nixosModules/stalwart.nix
@@ -20,7 +20,7 @@
     sops.secrets.stalwart-admin-password = { owner = "stalwart-mail"; group = "stalwart-mail"; };
     sops.secrets.stalwart-kyren-password = { owner = "stalwart-mail"; group = "stalwart-mail"; };
     sops.secrets.stalwart-eko-password = { owner = "stalwart-mail"; group = "stalwart-mail"; };
-    sops.secrets.stalwart-git-password = { owner = "stalwart-mail"; group = "gitea"; };
+    sops.secrets.stalwart-git-password = { owner = "stalwart-mail"; group = "gitea"; mode = "0440"; };
     sops.secrets.stalwart-postmaster-password = { owner = "stalwart-mail"; group = "stalwart-mail"; };
 
     services.nginx.virtualHosts."webadmin.kyren.codes" = {