fix: use correct user/group for secret
Also ensure service restarts on secret rotation.
Jeremy Fleischman committed
Apr 9, 2025 at 17:33 UTC
7ddeab020b86a761d3247f284b616ebc99ba11ae
1 file changed
+3
non-critical-infra/modules/mailserver/postsrsd.nix
+3
@@ -35,6 +35,9 @@
35
# ```
36
sops.secrets.postsrsd-secret = {
37
format = "binary";
38
+ owner = config.services.postsrsd.user;
39
+ group = config.services.postsrsd.group;
40
sopsFile = ../../secrets/postsrsd-secret.umbriel;
41
+ restartUnits = [ "postsrsd.service" ];
42
};
43
}