darkkirb/nixos-config
1
0
Fork 0
Code Issues 1 Pull requests 1 Projects Releases Packages Wiki Activity Actions

allow gpg to run

Browse source
This commit is contained in:
Charlotte 🦝 Delenk 2022-07-04 10:37:19 +01:00
parent 7a03c771ff
commit 4958fe6a68
Signed by: darkkirb
GPG key ID: AB2BD8DAF2E37122
1 changed files with 3 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

3
modules/gitea.nix
View file

@ -34,6 +34,9 @@ in {
config = mkIf cfg.enable {
systemd.services.gitea = {
path = [ pkgs.gnupg ];
serviceConfig = {
SystemCallFilter = mkForce "~@clock @cpu-emulation @debug @module @mount @obsolete @raw-io @reboot @resources @setuid @swap";
};
# In older versions the secret naming for JWT was kind of confusing.
# The file jwt_secret hold the value for LFS_JWT_SECRET and JWT_SECRET
# wasn't persistant at all.