fix: allow stalwart to read agenix secrets

This commit is contained in:
Jet Pham 2026-03-09 22:46:49 -07:00
parent 2f04d2601e
commit 9dd83c5b92
No known key found for this signature in database

View file

@ -48,7 +48,8 @@
}; };
}; };
# Allow Stalwart to read the ACME certificate procured for Caddy # Allow Stalwart to read the ACME certificate procured for Caddy and the agenix secret
systemd.services.stalwart.serviceConfig.SupplementaryGroups = [ "acme" ]; systemd.services.stalwart.serviceConfig.SupplementaryGroups = [ "acme" ];
systemd.services.stalwart.serviceConfig.ReadOnlyPaths = [ "/run/agenix/stalwart-admin" ];
} }