From fe9c31f2838c7c5bf1835ea4c48e0627399d02d4 Mon Sep 17 00:00:00 2001 From: Soispha Date: Wed, 4 Oct 2023 20:19:52 +0200 Subject: fix(system/services/taskserver): Switch to strings instead of paths --- system/services/taskserver/default.nix | 6 ++---- 1 file changed, 2 insertions(+), 4 deletions(-) (limited to 'system') diff --git a/system/services/taskserver/default.nix b/system/services/taskserver/default.nix index 7595700..200562f 100644 --- a/system/services/taskserver/default.nix +++ b/system/services/taskserver/default.nix @@ -6,10 +6,8 @@ in { pki.manual = { ca.cert = ./ca.cert.pem; server = { - # FIXME(@soispha): These are put _world-readable_ in the nix store, which is - # obviously very bad. These values should be strings <2023-10-04> - cert = /. + "${taskStore}/fullchain.pem"; - key = /. + "${taskStore}/privkey.pem"; + cert = "${taskStore}/fullchain.pem"; + key = "${taskStore}/privkey.pem"; }; }; organisations = import ./organisations.nix; -- cgit 1.4.1