Only start fetch-keys for GCE image after ip-up.

This commit is contained in:
Rob Vermaas 2015-02-27 10:48:15 +00:00
parent 836b3d835e
commit 24e0565407

@ -129,10 +129,10 @@ in
wantedBy = [ "sshd.service" ];
before = [ "sshd.service" ];
after = [ "network-online.target" ];
wants = [ "network-online.target" ];
after = [ "network-online.target" "ip-up.target" ];
wants = [ "network-online.target" "ip-up.target" ];
script = let wget = "${pkgs.wget}/bin/wget --retry-connrefused -t 6 --waitretry=10 --header='Metadata-Flavor: Google'"; in
script = let wget = "${pkgs.wget}/bin/wget --retry-connrefused -t 15 --waitretry=10 --header='Metadata-Flavor: Google'"; in
''
# When dealing with cryptographic keys, we want to keep things private.
umask 077