Merge pull request #188771 from K900/vaultwarden-permissions
nixos/vaultwarden: protect the default data directory more
This commit is contained in:
commit
fcea1ef75f
|
@ -196,6 +196,7 @@ ADMIN_TOKEN=...copy-paste a unique generated secret token here...
|
|||
ProtectSystem = "strict";
|
||||
AmbientCapabilities = "CAP_NET_BIND_SERVICE";
|
||||
StateDirectory = "bitwarden_rs";
|
||||
StateDirectoryMode = "0700";
|
||||
};
|
||||
wantedBy = [ "multi-user.target" ];
|
||||
};
|
||||
|
|
Loading…
Reference in a new issue