felixalb/nixos-config
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

Flake -> 23.05. Patch/update sarek

Browse Source
This commit is contained in:
Felix Albrigtsen
2023-12-16 17:38:22 +01:00
committed by Felix Albrigtsen
parent db248b79e1
commit e8cfba2d0a
4 changed files with 44 additions and 36 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
hosts/sarek/services/hedgedoc.nix
View File

@@ -78,7 +78,7 @@ in {
UMask = "0007";
RestrictAddressFamilies = [ "AF_UNIX AF_INET AF_INET6" ];
SystemCallArchitectures = "native";
SystemCallFilter = "~@clock @cpu-emulation @debug @keyring @module @mount @obsolete @raw-io @reboot @setuid @swap";
# SystemCallFilter = "~@clock @cpu-emulation @debug @keyring @module @mount @obsolete @raw-io @reboot @setuid @swap";
};
};
@@ -88,9 +88,7 @@ in {
ensureDatabases = [ "hedgedoc" ];
ensureUsers = [{
name = "hedgedoc";
ensurePermissions = {
"DATABASE \"hedgedoc\"" = "ALL PRIVILEGES";
};
ensureDBOwnership = true;
}];
};
}