nats: drop the access to a certificate directory it no longer mounts

nats declares the certificate directory it mounts
The mesh's broker certificate is the operator's, kept outside any module and mounted read-only by whatever serves the bus; the controller declares that access and now so does nats, the same way. A mount nothing declares is refused at registration (ADR 0030), which is how this was found.
2026-09-28 00:16:23 +02:00 · 2026-09-28 00:15:59 +02:00
1 changed files with 1 additions and 1 deletions
@@ -68,7 +68,7 @@
  ],
  "accesses": [
    {
-      "path": "/var/lib/mesh-broker-nats-tls",
+      "path": "/var/lib/mesh-broker-tls",
      "mode": "read"
    }
  ],