From 2b485d822c3d3e2f2a3775c528f18a542ef320ad Mon Sep 17 00:00:00 2001
From: Yureka <yuka@yuka.dev>
Date: Mon, 22 Jul 2024 02:14:46 +0200
Subject: [PATCH] fix(modules): set umask for narbridge service

---
 modules/default.nix | 1 +
 1 file changed, 1 insertion(+)

diff --git a/modules/default.nix b/modules/default.nix
index 8630bac..b316c70 100644
--- a/modules/default.nix
+++ b/modules/default.nix
@@ -156,6 +156,7 @@ in
             EXPERIMENTAL_STORE_COMPOSITION = settingsFormat.generate "Config.toml" cache.nar-bridge-composition;
           };
           serviceConfig = {
+            UMask = "007";
             ExecStart = "${pkgs.tvix}/bin/nar-bridge --otlp=false --listen-address=\"${cache.narBridgeListenAddress}\"";
             DynamicUser = true;
             Group = "tvix-castore";