From 8765032b50fde4d5db39d94c7eba641ccf2aa300 Mon Sep 17 00:00:00 2001
From: Felix Singer <felixsinger@posteo.net>
Date: Mon, 6 Oct 2025 20:27:15 +0200
Subject: [PATCH] nixos/jenkins: Ensure proper permissions for state directory

Signed-off-by: Felix Singer <felixsinger@posteo.net>
---
 .../modules/services/continuous-integration/jenkins/default.nix  | 1 +
 1 file changed, 1 insertion(+)

diff --git a/nixos/modules/services/continuous-integration/jenkins/default.nix b/nixos/modules/services/continuous-integration/jenkins/default.nix
index 49632095d6ea..ef7f5ac613b8 100644
--- a/nixos/modules/services/continuous-integration/jenkins/default.nix
+++ b/nixos/modules/services/continuous-integration/jenkins/default.nix
@@ -253,6 +253,7 @@ in
         User = cfg.user;
         Group = cfg.group;
         StateDirectory = lib.mkIf (lib.hasPrefix "/var/lib/jenkins" cfg.home) "jenkins";
+        StateDirectoryMode = "750";
         # For (possible) socket use
         RuntimeDirectory = "jenkins";
         AmbientCapabilities = "";