gador/nixpkgs
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

nixos/yggdrasil: Fix stray 0-byte /private-key file (#538065)

Browse Source
This commit is contained in:
Florian Klink
2026-07-06 12:19:39 +00:00
committed by GitHub
parent 9fe04c4011 fa01843a3b
commit 8bb61a40df
1 changed files with 3 additions and 10 deletions
Download Patch File Download Diff File Expand all files Collapse all files
nixos/modules/services/networking/yggdrasil.nix
+3 -10
View File
@@ -33,17 +33,11 @@ let
else
null;
# Build base configuration with systemd credential path override
baseSettings =
cfg.settings
// (
if effectiveKeyPath != null then
{
PrivateKeyPath = "/private-key";
}
else
{ }
);
// lib.optionalAttrs (effectiveKeyPath != null) {
PrivateKeyPath = "/run/credentials/yggdrasil.service/private-key";
};
# Remove null values that yggdrasil doesn't expect
cleanSettings = lib.filterAttrs (n: v: v != null) baseSettings;
@@ -327,7 +321,6 @@ in
StateDirectory = "yggdrasil";
RuntimeDirectory = "yggdrasil";
RuntimeDirectoryMode = "0750";
BindReadOnlyPaths = lib.optional (effectiveKeyPath != null) "%d/private-key:/private-key";
LoadCredential = lib.optional (effectiveKeyPath != null) "private-key:${effectiveKeyPath}";
AmbientCapabilities = "CAP_NET_ADMIN CAP_NET_BIND_SERVICE";