diff options
| -rw-r--r-- | genenetwork/services/genenetwork.scm | 6 |
1 files changed, 5 insertions, 1 deletions
diff --git a/genenetwork/services/genenetwork.scm b/genenetwork/services/genenetwork.scm index e28a87f..663b7ca 100644 --- a/genenetwork/services/genenetwork.scm +++ b/genenetwork/services/genenetwork.scm @@ -137,7 +137,7 @@ (define (genenetwork-activation config) (match-record config <genenetwork-configuration> - (gn2-secrets gn3-secrets gn-auth-secrets auth-db llm-db) + (gn2-secrets gn3-secrets gn-auth-secrets auth-db llm-db ssl-path) (with-imported-modules '((guix build utils)) #~(begin (use-modules (guix build utils)) @@ -149,6 +149,10 @@ (cons #$gn-auth-secrets (find-files #$(dirname auth-db) #:directories? #t))) + ;; Everyone can read, write and execute + (for-each (lambda (file) + (chmod file #o777)) + (find-files #$ssl-path #:directories? #t)) ;; Let each service user own their own secrets files. (chown #$gn2-secrets (passwd:uid (getpw "gunicorn-genenetwork2")) |