match the guest's legacy key path in the grafana tmpfiles check, not the /run secrets dir
This commit is contained in:
parent
a4e48a7bca
commit
c4e8d5b540
1 changed files with 2 additions and 1 deletions
|
|
@ -278,7 +278,8 @@ let
|
||||||
== "$__file{/run/swarm-grafana-secrets/secret-key}"
|
== "$__file{/run/swarm-grafana-secrets/secret-key}"
|
||||||
&& !(guest.systemd.services ? swarm-grafana-secret-key)
|
&& !(guest.systemd.services ? swarm-grafana-secret-key)
|
||||||
&& guest.systemd.services ? grafana
|
&& guest.systemd.services ? grafana
|
||||||
&& !(lib.any (lib.hasInfix "grafana-secret") m.systemd.tmpfiles.rules)
|
&& !(lib.any (lib.hasInfix "/var/lib/grafana-secret") m.systemd.tmpfiles.rules)
|
||||||
|
&& lib.any (lib.hasInfix "/var/lib/grafana-admin") m.systemd.tmpfiles.rules
|
||||||
&& lib.elem "r /var/lib/nixos-containers/swarm-grafana/var/lib/grafana-admin/password" m.systemd.tmpfiles.rules;
|
&& lib.elem "r /var/lib/nixos-containers/swarm-grafana/var/lib/grafana-admin/password" m.systemd.tmpfiles.rules;
|
||||||
}
|
}
|
||||||
{
|
{
|
||||||
|
|
|
||||||
Loading…
Reference in a new issue