From 658c5fefa7ebbab19e637bfea02b26b65863180f Mon Sep 17 00:00:00 2001
From: eymeric <hatchchien@protonmail.com>
Date: Wed, 1 Jul 2026 08:50:20 +0700
Subject: [PATCH] nixos/matrix-authentication-services: fix extraConfigFiles
 param permission issue

---
 .../services/matrix/matrix-authentication-service.nix    | 9 +++++++--
 1 file changed, 7 insertions(+), 2 deletions(-)

diff --git a/nixos/modules/services/matrix/matrix-authentication-service.nix b/nixos/modules/services/matrix/matrix-authentication-service.nix
index e0ec3438abb7..6f19d9455feb 100644
--- a/nixos/modules/services/matrix/matrix-authentication-service.nix
+++ b/nixos/modules/services/matrix/matrix-authentication-service.nix
@@ -43,6 +43,9 @@ let
     else
       pruned;
   configFile = format.generate "config.yaml" finalSettings;
+
+  extraConfigArgs = lib.imap0 (i: _: "%d/config-${toString i}") cfg.extraConfigFiles;
+  configFileArgs = [ configFile ] ++ extraConfigArgs;
 in
 {
   meta.maintainers = with lib.maintainers; [
@@ -388,13 +391,14 @@ in
       wantedBy = [ "multi-user.target" ];
       serviceConfig = {
         DynamicUser = true;
+        LoadCredential = lib.imap0 (i: path: "config-${toString i}:${path}") cfg.extraConfigFiles;
         ExecStartPre = ''
           ${getExe cfg.package} config check \
-            ${concatMapStringsSep " " (x: "--config ${x}") ([ configFile ] ++ cfg.extraConfigFiles)}
+            ${concatMapStringsSep " " (x: "--config ${x}") configFileArgs}
         '';
         ExecStart = ''
           ${getExe cfg.package} server \
-            ${concatMapStringsSep " " (x: "--config ${x}") ([ configFile ] ++ cfg.extraConfigFiles)}
+            ${concatMapStringsSep " " (x: "--config ${x}") configFileArgs}
         '';
         Restart = "on-failure";
         RestartSec = "1s";
@@ -436,6 +440,7 @@ in
         # Working and state directories
         StateDirectory = "matrix-authentication-service";
         StateDirectoryMode = "0700";
+        RuntimeDirectory = "matrix-authentication-service";
         WorkingDirectory = "/var/lib/matrix-authentication-service";
       };
     };