aboutsummaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorMunyoki Kilyungi2024-05-14 20:06:34 +0300
committerMunyoki Kilyungi2024-05-14 21:22:04 +0300
commit423f6c9e94b53c85d8c96d5ff9f0bc44665f6528 (patch)
treee51aaddd10c5237dbb751045e765f214b0aae7fb
parentd0ab755a0d6bf9bfb772cb6c1e4c1a38de50a0b7 (diff)
downloadgn-machines-423f6c9e94b53c85d8c96d5ff9f0bc44665f6528.tar.gz
services: genenetwork: Set ssl-path to 777.
-rw-r--r--genenetwork/services/genenetwork.scm6
1 files changed, 5 insertions, 1 deletions
diff --git a/genenetwork/services/genenetwork.scm b/genenetwork/services/genenetwork.scm
index e28a87f..663b7ca 100644
--- a/genenetwork/services/genenetwork.scm
+++ b/genenetwork/services/genenetwork.scm
@@ -137,7 +137,7 @@
(define (genenetwork-activation config)
(match-record config <genenetwork-configuration>
- (gn2-secrets gn3-secrets gn-auth-secrets auth-db llm-db)
+ (gn2-secrets gn3-secrets gn-auth-secrets auth-db llm-db ssl-path)
(with-imported-modules '((guix build utils))
#~(begin
(use-modules (guix build utils))
@@ -149,6 +149,10 @@
(cons #$gn-auth-secrets
(find-files #$(dirname auth-db)
#:directories? #t)))
+ ;; Everyone can read, write and execute
+ (for-each (lambda (file)
+ (chmod file #o777))
+ (find-files #$ssl-path #:directories? #t))
;; Let each service user own their own secrets files.
(chown #$gn2-secrets
(passwd:uid (getpw "gunicorn-genenetwork2"))