From e2dce63925e9dae9b5a9c735b06587941ca2a6a7 Mon Sep 17 00:00:00 2001
From: Akshay <nerdy@peppe.rs>
Date: Tue, 8 Apr 2025 10:02:48 +0100
Subject: [PATCH] fix knotVM configuration

---
 flake.nix | 12 ++++++++----
 1 file changed, 8 insertions(+), 4 deletions(-)

diff --git a/flake.nix b/flake.nix
index 8d98488d..b3e54792 100644
--- a/flake.nix
+++ b/flake.nix
@@ -20,8 +20,8 @@
       flake = false;
     };
     ibm-plex-mono-src = {
-        url = "https://github.com/IBM/plex/releases/download/%40ibm%2Fplex-mono%401.1.0/ibm-plex-mono.zip";
-        flake = false;
+      url = "https://github.com/IBM/plex/releases/download/%40ibm%2Fplex-mono%401.1.0/ibm-plex-mono.zip";
+      flake = false;
     };
     gitignore = {
       url = "github:hercules-ci/gitignore.nix";
@@ -415,8 +415,12 @@
           virtualisation.cores = 2;
           services.getty.autologinUser = "root";
           environment.systemPackages = with pkgs; [curl vim git];
-          systemd.tmpfiles.rules = [
-            "w /var/lib/knotserver/secret 0660 git git - KNOT_SERVER_SECRET=6995e040e80e2d593b5e5e9ca611a70140b9ef8044add0a28b48b1ee34aa3e85"
+          systemd.tmpfiles.rules = let
+            u = config.services.tangled-knotserver.gitUser;
+            g = config.services.tangled-knotserver.gitUser;
+          in [
+            "d /var/lib/knotserver 0770 ${u} ${g} - -" # Create the directory first
+            "f+ /var/lib/knotserver/secret 0660 ${u} ${g} - KNOT_SERVER_SECRET=6995e040e80e2d593b5e5e9ca611a70140b9ef8044add0a28b48b1ee34aa3e85"
           ];
           services.tangled-knotserver = {
             enable = true;
-- 
2.51.2