AZ-NIX-SERVERS

T

m3ta-chiron 6c9cb7b0e7 fix: atrocore-env ownership for atrocore-db-init (AZ-NIX-ava.2)

First deploy failed: atrocore-db-init (User=postgres) could not read
/run/agenix/atrocore-env because agenix defaults to root:root:0400.
Follow the pg-cert/pg-key precedent: owner/group postgres, mode 0400.
Podman still reads the env-file and registry token as root (root
bypasses DAC), container pull/run unaffected. Agenix applies
ownership at activation time - no rekey needed. Validated on AZ-PRM-1.

2026-08-17 14:16:09 +02:00

hosts

fix: atrocore-env ownership for atrocore-db-init (AZ-NIX-ava.2)

2026-08-17 14:16:09 +02:00

overlays

feat: AtroPIM image pipeline with secret-free build (AZ-NIX-ava.1)

2026-08-17 13:00:06 +02:00

pkgs

feat: AtroPIM image pipeline with secret-free build (AZ-NIX-ava.1)

2026-08-17 13:00:06 +02:00

secrets

feat: AtroPIM deployment config for AZ-PRM-1 (AZ-NIX-ava.2)