fix(vpn): fix nginx chown

This commit is contained in:
Felix Schröter 2024-04-30 23:15:04 +02:00
parent f1cfbee8e7
commit 0da0f61068
Signed by: felschr
GPG key ID: 671E39E6744C807D

View file

@ -40,8 +40,8 @@ in {
# some options cannot be set immediately # some options cannot be set immediately
${cfg.package}/bin/tailscale up ${lib.escapeShellArgs cfg.extraUpFlags} ${cfg.package}/bin/tailscale up ${lib.escapeShellArgs cfg.extraUpFlags}
# TODO nginx.service currently fails because it supposedly doesn't have permissions for this file
${cfg.package}/bin/tailscale cert ${tailnetHost} ${cfg.package}/bin/tailscale cert ${tailnetHost}
'' + lib.optionalString config.services.nginx.enable ''
chown nginx:nginx /var/lib/tailscale/certs/${tailnetHost}.{key,crt} chown nginx:nginx /var/lib/tailscale/certs/${tailnetHost}.{key,crt}
''; '';
}; };