public/nixpkgs
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Merge pull request #74852 from srhb/gitea-fix-start

Browse Source 
nixos/gitea: Fix startup
This commit is contained in:
Florian Klink
2019-12-05 22:56:46 +01:00
committed by GitHub
parent d49dba4b3b 218fe53e24
commit 77f26cc542
1 changed files with 2 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
nixos/modules/services/misc/gitea.nix
+2 -3
View File
@@ -396,9 +396,7 @@ in
Restart = "always"; Restart = "always";
# Filesystem # Filesystem
ProtectSystem = "strict";
ProtectHome = true; ProtectHome = true;
PrivateTmp = true;
PrivateDevices = true; PrivateDevices = true;
ProtectKernelTunables = true; ProtectKernelTunables = true;
ProtectKernelModules = true; ProtectKernelModules = true;
@@ -413,7 +411,7 @@ in
PrivateMounts = true; PrivateMounts = true;
PrivateUsers = true; PrivateUsers = true;
MemoryDenyWriteExecute = true; MemoryDenyWriteExecute = true;
SystemCallFilter = "~@chown @clock @cpu-emulation @debug @keyring @memlock @module @mount @obsolete @privileged @raw-io @reboot @resources @setuid @swap"; SystemCallFilter = "~@clock @cpu-emulation @debug @keyring @memlock @module @mount @obsolete @raw-io @reboot @resources @setuid @swap";
SystemCallArchitectures = "native"; SystemCallArchitectures = "native";
RestrictAddressFamilies = "AF_UNIX AF_INET AF_INET6"; RestrictAddressFamilies = "AF_UNIX AF_INET AF_INET6";
}; };
@@ -475,4 +473,5 @@ in
timerConfig.OnCalendar = cfg.dump.interval; timerConfig.OnCalendar = cfg.dump.interval;
}; };
}; };
meta.maintainers = with lib.maintainers; [ srhb ];
} }