From bb9de5b4cadb8520c133242323f117892fb04d41 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Torjus=20H=C3=A5kestad?= <torjus@usit.uio.no>
Date: Sat, 6 Dec 2025 11:37:11 +0100
Subject: [PATCH] auth01: fix secret mode

---
 services/lldap/default.nix | 1 +
 1 file changed, 1 insertion(+)

diff --git a/services/lldap/default.nix b/services/lldap/default.nix
index 552c5a8..2dce8c3 100644
--- a/services/lldap/default.nix
+++ b/services/lldap/default.nix
@@ -6,6 +6,7 @@
     sopsFile = ../../secrets/auth01/secrets.yaml;
     restartUnits = [ "lldap.service" ];
     group = "acme";
+    mode = "0440";
   };
 
   services.lldap = {