srv-m: fix acme post script execution

EHfive · Oct 2, 2023 · 609e81c · 609e81c
1 parent 91a5e5f
commit 609e81c
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 2 deletions.
diff --git a/machines/srv-m/configuration.nix b/machines/srv-m/configuration.nix
@@ -12,7 +12,7 @@ in
     defaultSopsFile = ./secrets/secrets.yaml;
     secrets = {
       acmeEnv = { };
-      postScript = { mode = "0500"; };
+      postScript = { mode = "0500"; owner = "acme"; };
       trustedNetworks = { };
       bindDnPw = { };
       passdbLdap.owner = dovecotUser;

diff --git a/machines/srv-m/services.nix b/machines/srv-m/services.nix
@@ -21,7 +21,7 @@ in
         "*.sokka.cn"
       ];
       postRun = ''
-        export PATH="$PATH:${pkgs.openssh}/bin:${pkgs.sshpass}/bin"
+        export PATH="$PATH:${pkgs.bash}/bin/:${pkgs.openssh}/bin:${pkgs.sshpass}/bin"
         bash ${secrets.postScript.path}
       '';
       reloadServices = [