host: opt: www: Ensure the webserver root directory is owned by www-data

aftix · Dec 20, 2024 · 88934b5 · 88934b5
1 parent 5199ea0
commit 88934b5
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 0 deletions.
diff --git a/host/opt/www/blog.nix b/host/opt/www/blog.nix
@@ -18,6 +18,7 @@ in {
     systemd.tmpfiles.rules =
       [
         "d ${cfg.root}/${cfg.hostname} 0775 ${cfg.user} ${cfg.group} -"
+        "e ${cfg.root}/${cfg.hostname} 0775 ${cfg.user} ${cfg.group} -"
       ]
       ++ optional cfg.adventofcode "d ${cfg.root}/advent2023 0775 ${cfg.user} ${cfg.group} -"
       ++ optional cfg.aftgraphs "d ${cfg.root}/simulations 0775 ${cfg.user} ${cfg.group} -";

diff --git a/host/opt/www/default.nix b/host/opt/www/default.nix
@@ -126,6 +126,7 @@ in {
       blockerPkg = pkgs.nginx_blocker.overrideAttrs {patches = cfg.nginxBlockerPatches;};
     in [
       "d ${cfg.root} 0775 ${cfg.user} ${cfg.group} -"
+      "e ${cfg.root} 0775 ${cfg.user} ${cfg.group} -"
       "L+ /etc/nginx/conf.d - - - - ${blockerPkg}/conf.d"
       "L+ /etc/nginx/bots.d - - - - ${blockerPkg}/bots.d"
     ];