darkkirb/nixos-config
1
0
Fork 0
Code Issues 1 Pull requests 2 Projects Releases Packages Wiki Activity Actions

disable ReadWritePaths for gitea

Browse source
This commit is contained in:
Charlotte 🦝 Delenk 2022-07-09 08:39:06 +01:00
parent 3e77867c39
commit 5a6bd718f7
Signed by: darkkirb
GPG key ID: AB2BD8DAF2E37122
1 changed files with 1 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

1
modules/gitea.nix
View file

@ -36,6 +36,7 @@ in {
path = [pkgs.gnupg];
serviceConfig = {
SystemCallFilter = mkForce "~@clock @cpu-emulation @debug @module @mount @obsolete @raw-io @reboot @resources @setuid @swap";
ReadWritePaths = mkForce null;
};
# In older versions the secret naming for JWT was kind of confusing.
# The file jwt_secret hold the value for LFS_JWT_SECRET and JWT_SECRET