security: start setting permissions on secrets properly
This commit is contained in:
parent
01fb6d8ec9
commit
2adc358dec
6 changed files with 43 additions and 34 deletions
|
|
@ -40,8 +40,7 @@
|
|||
"root"
|
||||
username
|
||||
]
|
||||
++ lib.optional (builtins.hasAttr "native" config.services.gitea-actions-runner.instances) "gitea-runner"
|
||||
++ lib.optional config.services.hydra.enable "hydra hydra-www hydra-evaluator hydra-queue-runner";
|
||||
++ lib.optional (builtins.hasAttr "native" config.services.gitea-actions-runner.instances) "gitea-runner";
|
||||
in
|
||||
{
|
||||
nix-path = "nixpkgs=flake:nixpkgs";
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue