From 47928442a850e93a740b7ab1149994c73e37dcaf Mon Sep 17 00:00:00 2001
From: Philipp Bartsch <phil@grmr.de>
Date: Sun, 23 Aug 2020 18:14:39 +0200
Subject: [PATCH] nixos/opendkim: add keyPath to ReadWritePaths

---
 nixos/modules/services/mail/opendkim.nix | 1 +
 1 file changed, 1 insertion(+)

diff --git a/nixos/modules/services/mail/opendkim.nix b/nixos/modules/services/mail/opendkim.nix
index f4d856944ec..9bf6f338d93 100644
--- a/nixos/modules/services/mail/opendkim.nix
+++ b/nixos/modules/services/mail/opendkim.nix
@@ -131,6 +131,7 @@ in {
         RuntimeDirectory = optional (cfg.socket == defaultSock) "opendkim";
         StateDirectory = "opendkim";
         StateDirectoryMode = "0700";
+        ReadWritePaths = [ cfg.keyPath ];
 
         AmbientCapabilities = [];
         CapabilityBoundingSet = [];