fix: staging-hydra secret permissions for server and client
Simon Hauser committed
Aug 12, 2025 at 09:36 UTC
2ad8bdd70c707f0d2e74a4b5e74bf02b1e55bf7a
1 file changed
+2
-2
non-critical-infra/hosts/staging-hydra/hydra.nix
+2
-2
@@ -166,12 +166,12 @@ in
166
"queue-runner-server.key" = {
167
sopsFile = ../../secrets/queue-runner-server.key.staging-hydra;
168
format = "binary";
169
- owner = config.systemd.services.hydra-queue-runner.serviceConfig.User;
169
+ owner = config.systemd.services.nginx.serviceConfig.User;
170
};
171
"queue-runner-client.key" = {
172
sopsFile = ../../secrets/queue-runner-client.key.staging-hydra;
173
format = "binary";
174
- owner = config.systemd.services.hydra-queue-runner.serviceConfig.User;
174
+ owner = config.systemd.services.hydra-queue-builder-v2.serviceConfig.User;
175
};
176
hydra-users = {
177
sopsFile = ../../secrets/hydra-users.staging-hydra;