felixalb/pvv-nixos-config
1
0
Fork 0
mirror of https://git.pvv.ntnu.no/Drift/pvv-nixos-config.git synced 2026-07-04 17:51:48 +02:00
Code Issues Projects Releases Wiki Activity

fixup! WIP: temmie/userweb: inject users from passwd into httpd sandbox

Browse Source
This commit is contained in:
h7x4
2026-06-07 01:45:59 +09:00
parent e3e4e298be
commit a5bec764f7
2 changed files with 7 additions and 9 deletions
Download Patch File Download Diff File Expand all files Collapse all files
hosts/temmie/services/userweb/default.nix
+3 -5
View File
@@ -312,13 +312,11 @@ in
group-file = "/run/httpd/pamunix-sync/group";
output-dir = "/run/httpd/systemd-userdb";
shadow-file = pkgs.emptyFile;
email-domain = "pvv.ntnu.no";
output-passwd = true;
ignore-user-file = toString ./ignore_user_file.txt;
ignore-group-file = toString ./ignore_group_file.txt;
set-default-umask = "0077";
set-default-mount-no-devices = "true";
set-default-mount-no-suid = "true";
set-default-mount-no-execute = "false";
};
in ''${lib.getExe pkgs.passwd2systemd-users} ${args}'')
"${lib.getExe' pkgs.coreutils "shred"} -u /run/httpd/pamunix-sync/passwd /run/httpd/pamunix-sync/group"