Fachschaft/nixConfig
6
2
Fork 2
Code Issues 11 Pull requests 1 Projects Wiki Activity

Compare commits

base: Fachschaft:f2b83cf5d86e3f042d8eadb23fc6444aa3b57583
Branches Tags
Fachschaft:main
..
compare: Fachschaft:6b0a230d7e460448ee53f050176e1c0aa6a800de
Branches Tags
Fachschaft:main

1 commit
f2b83cf5d8 ... 6b0a230d7e

Author SHA1 Message Date
Gonne
6b0a230d7e Restrict HRZ allowlist update service privileges 2024-04-04 17:13:12 +02:00
1 changed files with 2 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

5
nixos/modules/mailman.nix
View file

@ -93,7 +93,6 @@ in {
serviceConfig = { serviceConfig = {
Type = "oneshot"; Type = "oneshot";
User = "mailman"; User = "mailman";
NoNewPrivileges = true;
# See https://www.man7.org/linux/man-pages/man5/systemd.exec.5.html # See https://www.man7.org/linux/man-pages/man5/systemd.exec.5.html
PrivateTmp = true; PrivateTmp = true;
ProtectHome = true; ProtectHome = true;
@ -131,8 +130,8 @@ in {
}; };
repo = "borg@192.168.1.11:lobon"; # TODO for https://gitea.mathebau.de/Fachschaft/nixConfig/issues/33 repo = "borg@192.168.1.11:lobon"; # TODO for https://gitea.mathebau.de/Fachschaft/nixConfig/issues/33
startAt = "daily"; startAt = "daily";
user = "mailman"; user = "root";
group = "mailman"; group = "root";
}; };
}; };
} }