freshrss: be conservative and use explicit octal mode bits

This commit is contained in:
colin 2023-01-04 07:14:54 +00:00
parent 170008f345
commit 247ad326b2

View File

@ -14,7 +14,7 @@
sops.secrets.freshrss_passwd = {
sopsFile = ../../../secrets/servo.yaml;
owner = config.users.users.freshrss.name;
mode = "400";
mode = "0400";
};
sane.impermanence.dirs.sys.plaintext = [
{ user = "freshrss"; group = "freshrss"; directory = "/var/lib/freshrss"; }