···

       
60
       
60
       
 
       


     

       
61
       
61
       
 
       
      serviceConfig = {

     

       
62
       
62
       
 
       
        ExecStartPre = lib.optional (cfg.secretFile != null)

     

       
63
       
63
       
-
       
          (pkgs.writeShellScript "pre-start" ''

     

       
63
       
63
       
+
       
          ("+" + pkgs.writeShellScript "pre-start" ''

     

       
64
       
64
       
 
       
            umask 077

     

       
65
       
65
       
 
       
            export $(xargs < ${cfg.secretFile})

     

       
66
       
66
       
 
       
            ${pkgs.envsubst}/bin/envsubst -i "${configFile}" > ${finalConfigFile}

     

       
67
       
67
       
 
       
            chown go-neb ${finalConfigFile}

     

       
68
       
68
       
 
       
          '');

     

       
69
       
69
       
-
       
        PermissionsStartOnly = true;

     

       
70
       
69
       
 
       
        RuntimeDirectory = "go-neb";

     

       
71
       
70
       
 
       
        ExecStart = "${pkgs.go-neb}/bin/go-neb";

     

       
72
       
71
       
 
       
        User = "go-neb";