Ensure secret files are mode 0600.

xinutec · Nov 4, 2023 · 35651eb · 35651eb
1 parent 20877d1
commit 35651eb
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/.config/home-manager/home.nix b/.config/home-manager/home.nix
@@ -111,6 +111,10 @@ in {
       setopt hist_reduce_blanks       # remove superfluous blanks
       keychain id_rsa
       . .keychain/${sys.networking.hostName}-sh
+
+      # Fix some permissions in case they went wrong after git clone
+      # and decrypt.
+      chmod 0600 $(git-crypt status | grep "^    encrypted: " | cut -b16-)
     '';
 
     shellAliases = {