refactor(tmpfiles): migrate 12 services to deferred serviceFilePerms

2026-02-12 13:51:05 -05:00
parent 9e346a8406
commit fa01077856
12 changed files with 46 additions and 53 deletions
--- a/services/postgresql.nix
+++ b/services/postgresql.nix
@@ -10,6 +10,9 @@
    (lib.serviceMountWithZpool "postgresql" service_configs.zpool_ssds [
      config.services.postgresql.dataDir
    ])
+    (lib.serviceFilePerms "postgresql" [
+      "Z ${config.services.postgresql.dataDir} 0700 postgresql postgresql"
+    ])
  ];

  services.postgresql = {
@@ -18,8 +21,4 @@
    dataDir = service_configs.postgres.dataDir;
  };

-  systemd.tmpfiles.rules = [
-    # postgresql requires 0700
-    "Z ${config.services.postgresql.dataDir} 0700 postgresql postgresql"
-  ];
 }