From d0a147e841c84b83fd3f7ceed68c0c1a660b81e9 Mon Sep 17 00:00:00 2001
From: Aaron Andersen <aaron@fosslib.net>
Date: Sun, 30 Jun 2019 21:59:47 -0400
Subject: [PATCH] nixos/mysql: run ExecStartPost as root (again) to preserve
 compatibility with installs that have been secured

---
 nixos/modules/services/databases/mysql.nix | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/nixos/modules/services/databases/mysql.nix b/nixos/modules/services/databases/mysql.nix
index c36aa96adf7..177e742d65e 100644
--- a/nixos/modules/services/databases/mysql.nix
+++ b/nixos/modules/services/databases/mysql.nix
@@ -412,7 +412,9 @@ in
                   '') cfg.ensureUsers}
               '';
             in
-              setupScript;
+              # ensureDatbases & ensureUsers depends on this script being run as root
+              # when the user has secured their mysql install
+              "+${setupScript}";
         };
       };