nixos/vaultwarden: protect the default data directory more
Fixes #179415
This commit is contained in:
parent
f09f7f1778
commit
a7bfb90ea8
|
@ -196,6 +196,7 @@ ADMIN_TOKEN=...copy-paste a unique generated secret token here...
|
|||
ProtectSystem = "strict";
|
||||
AmbientCapabilities = "CAP_NET_BIND_SERVICE";
|
||||
StateDirectory = "bitwarden_rs";
|
||||
StateDirectoryMode = "0700";
|
||||
};
|
||||
wantedBy = [ "multi-user.target" ];
|
||||
};
|
||||
|
|
Loading…
Reference in a new issue