gerg-l/nixos
1
0
Fork 0
mirror of https://github.com/Gerg-L/nixos.git synced 2025-12-10 08:53:56 -05:00
Code Issues Projects Releases Packages Wiki Activity Actions

nixfmt changes

Browse source
This commit is contained in:
Gerg-L 2023-12-20 22:52:31 -05:00
parent 92c371e3f6
commit 3897ba30d8
Signed by: gerg-l
SSH key fingerprint: SHA256:FPYDHIkvMocr4wdmZXpgpJjsb2Tw6rASs2ISPbOb0KI
37 changed files with 131 additions and 131 deletions
Download patch file Download diff file Expand all files Collapse all files

16
hosts/gerg-desktop/services/miniflux.nix
View file

@ -6,13 +6,13 @@ _:
...
}:
{
sops.secrets.minifluxenv = {};
sops.secrets.minifluxenv = { };
systemd.services = {
miniflux = {
description = "Miniflux service";
wantedBy = ["multi-user.target"];
requires = ["miniflux-dbsetup.service"];
wantedBy = [ "multi-user.target" ];
requires = [ "miniflux-dbsetup.service" ];
after = [
"network.target"
"postgresql.service"
@ -26,8 +26,8 @@ _:
RuntimeDirectoryMode = "0770";
EnvironmentFile = config.sops.secrets.minifluxenv.path;
# Hardening
CapabilityBoundingSet = [""];
DeviceAllow = [""];
CapabilityBoundingSet = [ "" ];
DeviceAllow = [ "" ];
LockPersonality = true;
MemoryDenyWriteExecute = true;
PrivateDevices = true;
@ -67,7 +67,7 @@ _:
};
miniflux-dbsetup = {
description = "Miniflux database setup";
requires = ["postgresql.service"];
requires = [ "postgresql.service" ];
after = [
"network.target"
"postgresql.service"
@ -88,11 +88,11 @@ _:
users = {
miniflux = {
group = "miniflux";
extraGroups = ["postgres"];
extraGroups = [ "postgres" ];
isSystemUser = true;
uid = 377;
};
${config.services.nginx.user}.extraGroups = ["miniflux"];
${config.services.nginx.user}.extraGroups = [ "miniflux" ];
};
};
}