From d3081ce51b50a390056403287ef75eb0d2eba54b Mon Sep 17 00:00:00 2001
From: Florian Sesser <florian@private.storage>
Date: Wed, 11 Aug 2021 14:14:31 +0000
Subject: [PATCH] Set mode for stateDirectory

---
 nixos/modules/issuer.nix | 1 +
 1 file changed, 1 insertion(+)

diff --git a/nixos/modules/issuer.nix b/nixos/modules/issuer.nix
index 2666f452..409f468a 100644
--- a/nixos/modules/issuer.nix
+++ b/nixos/modules/issuer.nix
@@ -168,6 +168,7 @@ in {
       # "The specified directory names must be relative" ... this
       # makes systemd create /var/lib/zkapissuer/ for us:
       serviceConfig.StateDirectory = "zkapissuer";
+      serviceConfig.StateDirectoryMode = "0750";
 
       script =
         let
-- 
GitLab