nixos/lighthouse: add dataDirs to unit ReadWritePaths

This commit is contained in:
georgewhewell 2022-11-22 23:24:29 +01:00 committed by Yt
parent dc7783ece2
commit 5b8c42f98c

View File

@ -247,6 +247,7 @@ in {
DynamicUser = true;
Restart = "on-failure";
StateDirectory = "lighthouse-beacon";
ReadWritePaths = [ cfg.beacon.dataDir ];
NoNewPrivileges = true;
PrivateTmp = true;
ProtectHome = true;
@ -287,6 +288,7 @@ in {
serviceConfig = {
Restart = "on-failure";
StateDirectory = "lighthouse-validator";
ReadWritePaths = [ cfg.validator.dataDir ];
CapabilityBoundingSet = "";
DynamicUser = true;
NoNewPrivileges = true;