# Directories for predastore.service. Declarative, so the modes are reasserted
# on every boot rather than only at install time.

# Holds the at-rest key and the TLS key, and the key loader is fail-closed on
# anything a group or other can read. Operator-placed key modes are left alone.
d /etc/predastore 0750 predastore predastore -

d /var/lib/predastore 0700 predastore predastore -