[Nix-dev] Change owner and permissions of a file in nix-store

Игорь Пашев pashev.igor at gmail.com
Wed Dec 16 17:10:40 CET 2015


I'd suggest to use NixOps keys and these tricks
http://lists.science.uu.nl/pipermail/nix-dev/2015-November/018806.html

2015-12-16 18:07 GMT+03:00 Augustin Borsu <augustin at sagacify.com>:
> I'm using the following snippet to deploy a private key and certificate
> to my server using nixops.
> I was wondering, is it possible to change the owner and permissions of
> files in the nix-store?
> It seems to me this would be more secure if the certificate and key was
> only accessible by the user launching apache and not by everyone else.
>
> Thanks.
>
> services = {
>    httpd = {
>      enable = true;
>      sslServerCert = builtins.toFile "ssl.crt" (builtins.readFile
> ./private/local.crt);
>      sslServerKey = builtins.toFile "ssl.key" (builtins.readFile
> ./private/local.key);
>      enableSSL = true;
>    };
> };
> _______________________________________________
> nix-dev mailing list
> nix-dev at lists.science.uu.nl
> http://lists.science.uu.nl/mailman/listinfo/nix-dev


More information about the nix-dev mailing list