Hi! I ran into the issue that my kube config, which I manage with home-manager is world read- and writable.
I hoped that there is an easy option to set file permissions with home-manager, e.g. home.file."foo".permissions = 0644 but something like this does not exist. All solutions a short web search turns up are overly complicated for something that seems to be a trivial task.
What is the easiest way to set permissions for a file with home-manager?
I use/abuse "systemd.user.tmpfiles.rules" to ensure important files and folders are present with the desired permissions. These are "for creation, deletion and cleaning of volatile and temporary files automatically", but from what I can tell, if you don't specify values for cleanup etc. then they are just created if they don't exist, permissions adjusted if they do and they are otherwise left alone. See the manpage tmpfiles.d(5) for the exact format.
@secana If you manage it with homemanager it will be world readable anyway, since it is a symlink to nix store, and files inside the nix store are always world readable