···

       
231
       
231
       
 
       
    };

     

       
232
       
232
       
 
       


     

       
233
       
233
       
 
       
    systemd.services = {

     

       
234
       
234
       
-
       
      dex.serviceConfig = mkIf cfg.dex.enable {

     

       
235
       
235
       
-
       
        # `dex.service` is super locked down out of the box, but we need some

     

       
236
       
236
       
-
       
        # place to write the SQLite database. This creates $STATE_DIRECTORY below

     

       
237
       
237
       
-
       
        # /var/lib/private because DynamicUser=true, but it gets symlinked into

     

       
238
       
238
       
-
       
        # /var/lib/dex inside the unit

     

       
239
       
239
       
-
       
        StateDirectory = "dex";

     

       
234
       
234
       
+
       
      dex = mkIf cfg.dex.enable {

     

       
235
       
235
       
+
       
        serviceConfig = {

     

       
236
       
236
       
+
       
          # `dex.service` is super locked down out of the box, but we need some

     

       
237
       
237
       
+
       
          # place to write the SQLite database. This creates $STATE_DIRECTORY below

     

       
238
       
238
       
+
       
          # /var/lib/private because DynamicUser=true, but it gets symlinked into

     

       
239
       
239
       
+
       
          # /var/lib/dex inside the unit

     

       
240
       
240
       
+
       
          StateDirectory = "dex";

     

       
241
       
241
       
+
       
        };

     

       
240
       
242
       
 
       
      };

     

       
241
       
243
       
 
       


     

       
242
       
244
       
 
       
      portunus = {