b12f/nixpkgs
1
0
Fork 0
Code Issues Pull requests Packages Projects Releases Wiki Activity

nixos/ipfs: Only set ReadWritePaths when hardened

Browse source 
Co-authored-by: Luflosi <Luflosi@users.noreply.github.com>
This commit is contained in:
Max 2022-03-30 01:42:00 +02:00
parent ce8cbe3c01
commit 72d6d73e37
1 changed files with 1 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
nixos/modules/services/network-filesystems/ipfs.nix
View file

@ -280,7 +280,7 @@ in
User = cfg.user;
Group = cfg.group;
StateDirectory = "";
ReadWritePaths = [ "" cfg.dataDir ];
ReadWritePaths = optionals (!cfg.autoMount) [ "" cfg.dataDir ];
} // optionalAttrs (cfg.serviceFdlimit != null) { LimitNOFILE = cfg.serviceFdlimit; };
} // optionalAttrs (!cfg.startWhenNeeded) {
wantedBy = [ "default.target" ];