nixos/vaultwarden: protect the default data directory more

Fixes #179415
This commit is contained in:
K900 2022-08-29 09:26:31 +03:00
parent f09f7f1778
commit a7bfb90ea8

View file

@ -196,6 +196,7 @@ ADMIN_TOKEN=...copy-paste a unique generated secret token here...
ProtectSystem = "strict";
AmbientCapabilities = "CAP_NET_BIND_SERVICE";
StateDirectory = "bitwarden_rs";
StateDirectoryMode = "0700";
};
wantedBy = [ "multi-user.target" ];
};