From 142c2ef77807f9071ae2326e54fc7e7c338b1b52 Mon Sep 17 00:00:00 2001
From: Conrad Kramer <conrad@conradkramer.com>
Date: Sun, 19 Apr 2026 01:22:32 -0700
Subject: [PATCH] Allow postgres bootstrap to read generated SQL

---
 nixos/modules/burrow-zulip.nix | 1 +
 1 file changed, 1 insertion(+)

diff --git a/nixos/modules/burrow-zulip.nix b/nixos/modules/burrow-zulip.nix
index 23ce77b..7d93705 100644
--- a/nixos/modules/burrow-zulip.nix
+++ b/nixos/modules/burrow-zulip.nix
@@ -204,6 +204,7 @@ END
 \$\$;
 ALTER ROLE zulip WITH LOGIN PASSWORD '$db_password_sql';
 SQL
+        chmod 0644 "$setup_sql"
 
         ${pkgs.util-linux}/bin/runuser -u postgres -- psql -v ON_ERROR_STOP=1 -f "$setup_sql"
       '';