From a138438fb9346f801240f0b15a0d443833da7885 Mon Sep 17 00:00:00 2001 From: matthewcroughan Date: Tue, 30 Jun 2026 22:09:09 +0100 Subject: [PATCH] nixos/printing: preserve ssl certs even when stateless failing to preserve SSL certs breaks the cups TOFU setup described at https://www.cups.org/doc/encryption.html, when sharing and networking between multiple instances of cups --- nixos/modules/services/printing/cupsd.nix | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/nixos/modules/services/printing/cupsd.nix b/nixos/modules/services/printing/cupsd.nix index d98642621477..95488b33e8d3 100644 --- a/nixos/modules/services/printing/cupsd.nix +++ b/nixos/modules/services/printing/cupsd.nix @@ -426,7 +426,9 @@ in preStart = lib.optionalString cfg.stateless '' - rm -rf /var/cache/cups /var/lib/cups /var/spool/cups + shopt -s extglob + rm -rf /var/cache/cups /var/spool/cups /var/lib/cups/!(ssl) + shopt -u extglob '' + '' (umask 022 && mkdir -p /var/cache /var/lib /var/spool)