temmie/userweb: restrict log access

2026-02-04 09:10:01 +01:00 · 2026-01-31 19:08:02 +09:00
parent c4d5cfde56
commit 7ab16bc949
1 changed files with 1 additions and 0 deletions
--- a/hosts/temmie/services/userweb.nix
+++ b/hosts/temmie/services/userweb.nix
@@ -161,6 +161,7 @@ in

      ConfigurationDirectory = [ "httpd" ];
      LogsDirectory = [ "httpd" ];
+      LogsDirectoryMode = "0700";

      CapabilityBoundingSet = [ "CAP_NET_BIND_SERVICE" ];
      LockPersonality = true;