From f4c8f89018b75387f2fd65452431881cab7c1ca3 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Ana=C3=AFs=20Saraiva?=
 <53227802+Kisakay@users.noreply.github.com>
Date: Tue, 25 Aug 2026 15:28:57 +0200
Subject: [PATCH] Update download.nix

---
 deploy/nixos/download.nix | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/deploy/nixos/download.nix b/deploy/nixos/download.nix
index 37c076f..07088e6 100644
--- a/deploy/nixos/download.nix
+++ b/deploy/nixos/download.nix
@@ -200,6 +200,13 @@ in
 
       script = ''
         set -euo pipefail
+
+        # The service runs as root but the checkout is owned by another user;
+        # allow git to operate on it without a persistent global config.
+        export GIT_CONFIG_COUNT=1
+        export GIT_CONFIG_KEY_0=safe.directory
+        export GIT_CONFIG_VALUE_0="${cfg.workingDir}"
+
         if [ ! -d "${cfg.workingDir}/.git" ]; then
           git clone ${cfg.repoUrl} ${cfg.workingDir}
         else