fix: allow stalwart to read agenix secrets
This commit is contained in:
parent
2f04d2601e
commit
9dd83c5b92
1 changed files with 2 additions and 1 deletions
|
|
@ -48,7 +48,8 @@
|
||||||
};
|
};
|
||||||
};
|
};
|
||||||
|
|
||||||
# Allow Stalwart to read the ACME certificate procured for Caddy
|
# Allow Stalwart to read the ACME certificate procured for Caddy and the agenix secret
|
||||||
systemd.services.stalwart.serviceConfig.SupplementaryGroups = [ "acme" ];
|
systemd.services.stalwart.serviceConfig.SupplementaryGroups = [ "acme" ];
|
||||||
|
systemd.services.stalwart.serviceConfig.ReadOnlyPaths = [ "/run/agenix/stalwart-admin" ];
|
||||||
|
|
||||||
}
|
}
|
||||||
|
|
|
||||||
Loading…
Add table
Add a link
Reference in a new issue