From f0576ecc887bbea651628c034d0a92c3750c9a37 Mon Sep 17 00:00:00 2001
From: Ryan Yin <xiaoyin_c@qq.com>
Date: Fri, 29 Nov 2024 22:30:36 +0800
Subject: [PATCH] fix: nix-access-token - permission

---
 flake.lock        | 6 +++---
 secrets/nixos.nix | 3 ++-
 2 files changed, 5 insertions(+), 4 deletions(-)

diff --git a/flake.lock b/flake.lock
index 418eecdd..eb01339d 100644
--- a/flake.lock
+++ b/flake.lock
@@ -829,10 +829,10 @@
     "mysecrets": {
       "flake": false,
       "locked": {
-        "lastModified": 1731155403,
-        "narHash": "sha256-3YbQ3LyA3qToYvlYgVor05ZIU8Mv4D/yACD6NubwlbA=",
+        "lastModified": 1732893968,
+        "narHash": "sha256-Bi0vjWt2S4PKfBToZNc8zUwlwZRUB5/OpDMC8k0hoig=",
         "ref": "refs/heads/main",
-        "rev": "9b540e3e9a1d8b68c3d16e9263fc9256edc09ceb",
+        "rev": "0d2564a2feb4f6fcc9cb98a3410fe5531e409043",
         "shallow": true,
         "type": "git",
         "url": "ssh://git@github.com/ryan4yin/nix-secrets.git"
diff --git a/secrets/nixos.nix b/secrets/nixos.nix
index 07a93e51..79529dca 100644
--- a/secrets/nixos.nix
+++ b/secrets/nixos.nix
@@ -116,7 +116,8 @@ in {
           {
             file = "${mysecrets}/nix-access-tokens.age";
           }
-          // high_security;
+          # access-token needs to be readable by the user running the `nix` command
+          // user_readable;
 
         # ---------------------------------------------
         # user can read this file.