gitolite: systemd tmpfile 'leading directories are implicitly created owned by root'

1 files changed, 16 insertions, 8 deletions

diff --git a/aphrodite/devops/git.nix b/aphrodite/devops/git.nix
index e5590d6..ea6a5eb 100644
--- a/aphrodite/devops/git.nix
+++ b/aphrodite/devops/git.nix
@@ -43,14 +43,22 @@ in {
     '';
   };
 
-  systemd.tmpfiles.settings."gitolite-local-code" = {
-    "${config.services.gitolite.dataDir}/.gitolite/local/hooks/repo-specific" = {
-      d = {
-        user = "${config.services.gitolite.user}";
-        group = "${config.services.gitolite.group}";
-        mode = "0755";
-      };
-    };
+  systemd.tmpfiles.settings = let
+    base = "${config.services.gitolite.dataDir}/.gitolite";
+    paths = ["/local" "/local/hooks" "/local/hooks/repo-specific"];
+    user = config.services.gitolite.user;
+    group = config.services.gitolite.group;
+  in {
+    "gitolite-local-code" = builtins.listToAttrs (map (p: {
+        name = "${base}${p}";
+        value = {
+          d = {
+            user = user;
+            group = group;
+          };
+        };
+      })
+      paths);
   };
 
   services.cgit.${domain} = {