nixpkgs/nixos
Maximilian Bosch 02c3bd2187
nixos/gitea: set umask for secret creation
This ensures that newly created secrets will have the permissions
`0640`. With this change it's ensured that no sensitive information will
be word-readable at any time.

Related to #121293.

Strictly speaking this is a breaking change since each new directory
(including data-files) aren't world-readable anymore, but actually these
shouldn't be, unless there's a good reason for it.
2021-04-30 21:39:11 +02:00
..
doc Merge pull request #118338 from Izorkin/update-nginx-zlib-ng 2021-04-27 16:36:25 +02:00
lib treewide: use lib.warnIf where appropriate 2021-04-28 21:44:21 +00:00
maintainers treewide: use auto diskSize for make-disk-image 2021-04-24 14:49:07 -04:00
modules nixos/gitea: set umask for secret creation 2021-04-30 21:39:11 +02:00
tests nixos/tests/cage: Fix the test with wlroots 0.13 2021-04-30 15:57:04 +02:00
COPYING
default.nix
README
release-combined.nix
release-small.nix
release.nix nixos: use supportedSystems argument instead of hardcoded list for netboot 2021-04-23 18:34:51 +02:00

*** NixOS ***

NixOS is a Linux distribution based on the purely functional package
management system Nix.  More information can be found at
https://nixos.org/nixos and in the manual in doc/manual.