From f5ed731abbc38d765333b005b9815a5f6d3e59c2 Mon Sep 17 00:00:00 2001
From: Kleidi Bujari <mail@4kb.net>
Date: Tue, 10 Dec 2024 13:24:51 -0500
Subject: Finalize working configs and prior to adding secrets

System configurations in a known good state. Secrets still have to be
integrated, at this point the nixos-anywhere project will likely handle
this to keep the bootstrap completely automatic since it can copy ssh
host keys to the host prior to install/activation. This would work
nicely with the sops secret module, but a good way to manage host keys
for each machine still has to be decided.
---
 modules/xnet/gitserver/default.nix | 1 +
 1 file changed, 1 insertion(+)

(limited to 'modules/xnet/gitserver/default.nix')

diff --git a/modules/xnet/gitserver/default.nix b/modules/xnet/gitserver/default.nix
index 5e04398..da83f73 100644
--- a/modules/xnet/gitserver/default.nix
+++ b/modules/xnet/gitserver/default.nix
@@ -31,6 +31,7 @@ in
       initialPassword = "";
       isSystemUser = true;
       home = cfg.path;
+      homeMode = "755";
       createHome = true;
       shell = "${pkgs.git}/bin/git-shell";
       openssh.authorizedKeys.keys = cfg.keys;
-- 
cgit v1.3.1