From 9fd968ff62b84107fcdd32f9a62caabd5950facb Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Kier=C3=A1n=20Meinhardt?= <kmein@posteo.de>
Date: Mon, 24 Apr 2023 06:38:37 +0200
Subject: [PATCH] fix(onlyoffice): make readable

---
 systems/makanek/onlyoffice.nix | 14 ++++++--------
 1 file changed, 6 insertions(+), 8 deletions(-)

diff --git a/systems/makanek/onlyoffice.nix b/systems/makanek/onlyoffice.nix
index 3f5a594..c74d24a 100644
--- a/systems/makanek/onlyoffice.nix
+++ b/systems/makanek/onlyoffice.nix
@@ -15,14 +15,12 @@
     owner = "onlyoffice";
   };
 
-  systemd.services.onlyoffice-docservice.serviceConfig.ExecStartPre = [
-    # otherwise this leads to nginx
-    # open() "/var/lib/onlyoffice/documentserver/App_Data/cache/files/data/conv_check_1138411943_docx/output.docx" failed (13: Permission denied)
-    # and mysterious 403 errors
-    (pkgs.writers.writeDash "make-reachable" ''
-      chmod a+x /var/lib/onlyoffice/documentserver/
-    '')
-  ];
+  # otherwise this leads to nginx
+  # open() "/var/lib/onlyoffice/documentserver/App_Data/cache/files/data/conv_check_1138411943_docx/output.docx" failed (13: Permission denied)
+  # and mysterious 403 errors
+  system.activationScripts.onlyoffice-readable.text = ''
+    chmod a+x /var/lib/onlyoffice/documentserver/
+  '';
 
   services.nginx.virtualHosts.${config.services.onlyoffice.hostname} = {
     enableACME = true;