nixos/pretix: make state directory world-readable

Pretix creates static files in its state directory, that nginx needs to
serve, so locking down the permissions that hard is not going to work.
This commit is contained in:
Martin Weinelt 2024-03-16 23:39:31 +01:00
parent 7431fec51f
commit 2b003c0269
No known key found for this signature in database
GPG key ID: 87C1E9888F856759

View file

@ -468,6 +468,7 @@ in
StateDirectory = [
"pretix"
];
StateDirectoryMode = "0755";
CacheDirectory = "pretix";
LogsDirectory = "pretix";
WorkingDirectory = cfg.settings.pretix.datadir;
@ -506,7 +507,7 @@ in
"~@privileged"
"@chown"
];
UMask = "0077";
UMask = "0022";
};
};
in {