From c525e36a3dd0345e3ef04b9e2669264b4ec7daa2 Mon Sep 17 00:00:00 2001
From: Soispha <soispha@vhack.eu>
Date: Fri, 11 Aug 2023 09:54:23 +0200
Subject: Fix(system/services/invidious): Set correct access permissions on
 hmac

---
 system/services/invidious/default.nix | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

(limited to 'system/services')

diff --git a/system/services/invidious/default.nix b/system/services/invidious/default.nix
index 17ba0c1..8b69c2e 100644
--- a/system/services/invidious/default.nix
+++ b/system/services/invidious/default.nix
@@ -6,10 +6,13 @@
     };
     domain = "invidious.vhack.eu";
     nginx.enable = true;
-    extraSettingsFile = "${config.age.secrets.invidiousHmac.path}";
+    extraSettingsFile = "$CREDENTIALS_DIRECTORY/hmac";
 
     settings = {
       check_tables = true;
     };
   };
+  systemd.services.invidious.serviceConfig = {
+    LoadCredential = "hmac:${config.age.secrets.invidiousHmac.path}";
+  };
 }
-- 
cgit 1.4.1