Merge pull request #245399 from mweinelt/conduit-chmod-umask

nixos/conduit: improve state directory permissions
2023-07-25 18:50:03 -06:00 · 2023-07-25 18:50:03 -06:00 · e3696d3a5d
parent 4a3eba74a1 18733782ad
commit e3696d3a5d
1 changed files with 2 additions and 0 deletions
--- a/nixos/modules/services/matrix/conduit.nix
+++ b/nixos/modules/services/matrix/conduit.nix
@ -138,10 +138,12 @@ in
            "~@privileged"
          ];
          StateDirectory = "matrix-conduit";
+          StateDirectoryMode = "0700";
          ExecStart = "${cfg.package}/bin/conduit";
          Restart = "on-failure";
          RestartSec = 10;
          StartLimitBurst = 5;
+          UMask = "077";
        };
      };
    };