Avoid using possibly non-existent file in activation script for peertube

1 files changed, 3 insertions, 2 deletions

diff --git a/nixops/modules/websites/tools/peertube/default.nix b/nixops/modules/websites/tools/peertube/default.nix
index 1f88a15..bb601af 100644
--- a/nixops/modules/websites/tools/peertube/default.nix
+++ b/nixops/modules/websites/tools/peertube/default.nix
@@ -22,6 +22,7 @@ in {
       description = "Peertube user";
       home = peertube.varDir;
       useDefaultShell = true;
+      extraGroups = [ "keys" ];
     };
 
     users.groups.peertube.gid = config.ids.gids.peertube;
@@ -61,7 +62,7 @@ in {
       destDir = "/run/keys/webapps";
       user = "peertube";
       group = "peertube";
-      permissions = "0400";
+      permissions = "0640";
       text = peertube.config;
     };
 
@@ -70,7 +71,7 @@ in {
       text = ''
         install -m 0750 -o peertube -g peertube -d ${peertube.varDir}
         install -m 0750 -o peertube -g peertube -d ${peertube.varDir}/config
-        install -m 0640 -o peertube -g peertube -T /run/keys/webapps/tools-peertube ${peertube.varDir}/config/production.yaml
+        ln -sf /run/keys/webapps/tools-peertube ${peertube.varDir}/config/production.yaml
         '';
     };