commit 783e55b0be286e4350dc9b9f834a8b6f79895c8f · pyrox.dev/nixpkgs

+7 -1
nixos/modules/services/security/endlessh-go.nix
···

       110
       110
        
                   );

     

       111
       111
        
                 DynamicUser = true;

     

       112
       112
        
                 RootDirectory = rootDirectory;

     

       113
       113
       -
                 BindReadOnlyPaths = [ builtins.storeDir ];

     

       113
       113
       +
                 BindReadOnlyPaths = [

     

       114
       114
       +
                   builtins.storeDir

     

       115
       115
       +
                   "-/etc/hosts"

     

       116
       116
       +
                   "-/etc/localtime"

     

       117
       117
       +
                   "-/etc/nsswitch.conf"

     

       118
       118
       +
                   "-/etc/resolv.conf"

     

       119
       119
       +
                 ];

     

       114
       120
        
                 InaccessiblePaths = [ "-+${rootDirectory}" ];

     

       115
       121
        
                 RuntimeDirectory = baseNameOf rootDirectory;

     

       116
       122
        
                 RuntimeDirectoryMode = "700";