···

       
152
       
152
       
 
       
      serviceConfig = {

     

       
153
       
153
       
 
       
        # The service's only task is to ensure that the specified path exists

     

       
154
       
154
       
 
       
        Type = "oneshot";

     

       
155
       
155
       
+
       
        WorkingDirectory = cfg.path;

     

       
155
       
156
       
 
       
      };

     

       
156
       
157
       
 
       
      wantedBy = [ "multi-user.target" ];

     

       
157
       
158
       
 
       
    };

     

···

       
100
       
100
       
 
       
      serviceConfig = {

     

       
101
       
101
       
 
       
        User = config.users.users.gollum.name;

     

       
102
       
102
       
 
       
        Group = config.users.groups.gollum.name;

     

       
103
       
103
       
+
       
        WorkingDirectory = cfg.stateDir;

     

       
103
       
104
       
 
       
        ExecStart = ''

     

       
104
       
105
       
 
       
          ${pkgs.gollum}/bin/gollum \

     

       
105
       
106
       
 
       
            --port ${toString cfg.port} \

     

···

       
195
       
195
       
 
       
        SystemCallArchitectures = "native";

     

       
196
       
196
       
 
       
        SystemCallFilter = [ "@system-service" "~@privileged" "~@resources" ];

     

       
197
       
197
       
 
       
        UMask = "0027";

     

       
198
       
198
       
+
       
        WorkingDirectory = "/var/lib/radicale";

     

       
198
       
199
       
 
       
      };

     

       
199
       
200
       
 
       
    };

     

       
200
       
201
       
 
       
  };