fix: protect agenix-rekey cacheDir on new setups by making it sticky by default

This commit is contained in:
oddlama 2023-09-30 14:49:50 +02:00
parent d9b1bf7e9a
commit 8dc3266b7f
No known key found for this signature in database
GPG key ID: 14EFE510775FE39A

View file

@ -90,7 +90,10 @@ in {
hideMounts = true;
directories =
[
"/var/tmp/agenix-rekey"
{
directory = "/var/tmp/agenix-rekey";
mode = "1777";
}
"/var/tmp/nix-import-encrypted" # Decrypted repo-secrets can be kept
"/var/lib/systemd"
"/var/log"