mirror of
https://github.com/NixOS/nixpkgs.git
synced 2024-11-27 09:23:01 +00:00
nixos/miniflux: allow members of miniflux group to read runtime directory
Otherwise a proxy server that has the miniflux group cannot read files in the runtime directory like a socket miniflux can listen on.
This commit is contained in:
parent
0db936b018
commit
9272b8ef79
@ -90,7 +90,7 @@ in
|
||||
User = "miniflux";
|
||||
DynamicUser = true;
|
||||
RuntimeDirectory = "miniflux";
|
||||
RuntimeDirectoryMode = "0700";
|
||||
RuntimeDirectoryMode = "0750";
|
||||
EnvironmentFile = cfg.adminCredentialsFile;
|
||||
# Hardening
|
||||
CapabilityBoundingSet = [ "" ];
|
||||
|
Loading…
Reference in New Issue
Block a user