clightning: allow group access to RPC socket

This commit is contained in:
nixbitcoin 2020-05-18 14:32:49 +00:00
parent 304dd297ba
commit 0ba55757f8
No known key found for this signature in database
GPG key ID: DD11F9AD5308B3BA
2 changed files with 4 additions and 8 deletions

View file

@ -132,12 +132,7 @@ in {
services.onion-chef.enable = true;
services.onion-chef.access.operator = [ "bitcoind" "clightning" "nginx" "liquidd" "spark-wallet" "electrs" "sshd" ];
# Unfortunately c-lightning doesn't allow setting the permissions of the rpc socket
# https://github.com/ElementsProject/lightning/issues/1366
security.sudo.configFile =
(optionalString cfg.clightning.enable ''
operator ALL=(clightning) NOPASSWD: ALL
'') +
(optionalString cfg.lnd.enable ''
operator ALL=(lnd) NOPASSWD: ALL
'');