From 423f6c9e94b53c85d8c96d5ff9f0bc44665f6528 Mon Sep 17 00:00:00 2001
From: Munyoki Kilyungi
Date: Tue, 14 May 2024 20:06:34 +0300
Subject: services: genenetwork: Set ssl-path to 777.

---
 genenetwork/services/genenetwork.scm | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

(limited to 'genenetwork/services/genenetwork.scm')

diff --git a/genenetwork/services/genenetwork.scm b/genenetwork/services/genenetwork.scm
index e28a87f..663b7ca 100644
--- a/genenetwork/services/genenetwork.scm
+++ b/genenetwork/services/genenetwork.scm
@@ -137,7 +137,7 @@
 
 (define (genenetwork-activation config)
   (match-record config <genenetwork-configuration>
-    (gn2-secrets gn3-secrets gn-auth-secrets auth-db llm-db)
+    (gn2-secrets gn3-secrets gn-auth-secrets auth-db llm-db ssl-path)
     (with-imported-modules '((guix build utils))
       #~(begin
           (use-modules (guix build utils))
@@ -149,6 +149,10 @@
                     (cons #$gn-auth-secrets
                           (find-files #$(dirname auth-db)
                                       #:directories? #t)))
+	  ;; Everyone can read, write and execute
+	  (for-each (lambda (file)
+		      (chmod file #o777))
+		    (find-files #$ssl-path #:directories? #t))
           ;; Let each service user own their own secrets files.
           (chown #$gn2-secrets
                  (passwd:uid (getpw "gunicorn-genenetwork2"))
-- 
cgit v1.2.3