From 4efc798c38a28628c4e203bff43d10ced47410c7 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Torjus=20H=C3=A5kestad?= <torjus@usit.uio.no>
Date: Mon, 9 Feb 2026 00:18:10 +0100
Subject: [PATCH] nixos-exporter: fix nkey file permissions

Set owner/group to nixos-exporter so the service can read the
NATS credentials file.

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
---
 system/monitoring/metrics.nix | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/system/monitoring/metrics.nix b/system/monitoring/metrics.nix
index 81b324e..5bed309 100644
--- a/system/monitoring/metrics.nix
+++ b/system/monitoring/metrics.nix
@@ -23,6 +23,8 @@
   vault.secrets.nixos-exporter-nkey = {
     secretPath = "shared/nixos-exporter/nkey";
     extractKey = "nkey";
+    owner = "nixos-exporter";
+    group = "nixos-exporter";
   };
 
   services.prometheus.exporters.nixos = {