From 99259356f2770e6085f2b3c759245ce623c8e06e Mon Sep 17 00:00:00 2001
From: Yureka <yuka@yuka.dev>
Date: Sun, 28 Jul 2024 23:30:38 +0200
Subject: [PATCH] make buildbot-signing-key accessible to buildbot-worker

---
 services/buildbot/default.nix | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/services/buildbot/default.nix b/services/buildbot/default.nix
index f771d60..4cd482e 100644
--- a/services/buildbot/default.nix
+++ b/services/buildbot/default.nix
@@ -31,7 +31,11 @@ in
     age.secrets.buildbot-oauth-secret.file = ../../secrets/buildbot-oauth-secret.age;
     age.secrets.buildbot-workers.file = ../../secrets/buildbot-workers.age;
     age.secrets.buildbot-service-key.file = ../../secrets/buildbot-service-key.age;
-    age.secrets.buildbot-signing-key.file = ../../secrets/buildbot-signing-key.age;
+    age.secrets.buildbot-signing-key = {
+      file = ../../secrets/buildbot-signing-key.age;
+      owner = "buildbot-worker";
+      group = "buildbot-worker";
+    };
     age.secrets.buildbot-remote-builder-key = {
       file = ../../secrets/buildbot-remote-builder-key.age;
       owner = "buildbot-worker";