From a8382fed12b0330b800974ec3d476812dac4aeaa Mon Sep 17 00:00:00 2001
From: Colin <colin@uninsane.org>
Date: Thu, 13 Jul 2023 22:18:45 +0000
Subject: [PATCH] hosts/common: move /var/lib/private defn into fs.nix

---
 hosts/common/default.nix | 3 ---
 hosts/common/fs.nix      | 3 +++
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/hosts/common/default.nix b/hosts/common/default.nix
index 2be0a159c..b0a28d7a5 100644
--- a/hosts/common/default.nix
+++ b/hosts/common/default.nix
@@ -23,9 +23,6 @@
   sane.programs.sysadminUtils.enableFor.system = lib.mkDefault true;
   sane.programs.consoleUtils.enableFor.user.colin = lib.mkDefault true;
 
-  # some services which use private directories error if the parent (/var/lib/private) isn't 700.
-  sane.fs."/var/lib/private".dir.acl.mode = "0700";
-
   nixpkgs.config.allowUnfree = true;
   nixpkgs.config.allowBroken = true;  # NIXPKGS_ALLOW_BROKEN
 
diff --git a/hosts/common/fs.nix b/hosts/common/fs.nix
index ab3ef1c99..74d9f00e5 100644
--- a/hosts/common/fs.nix
+++ b/hosts/common/fs.nix
@@ -57,6 +57,9 @@ let fsOpts = rec {
 };
 in
 {
+  # some services which use private directories error if the parent (/var/lib/private) isn't 700.
+  sane.fs."/var/lib/private".dir.acl.mode = "0700";
+
   # fileSystems."/mnt/servo-nfs" = {
   #   device = "servo-hn:/";
   #   noCheck = true;