Compare commits

..

1 commit

Author SHA1 Message Date
6b0a230d7e Restrict HRZ allowlist update service privileges 2024-04-04 17:13:12 +02:00

View file

@ -93,7 +93,6 @@ in {
serviceConfig = {
Type = "oneshot";
User = "mailman";
NoNewPrivileges = true;
# See https://www.man7.org/linux/man-pages/man5/systemd.exec.5.html
PrivateTmp = true;
ProtectHome = true;
@ -131,8 +130,8 @@ in {
};
repo = "borg@192.168.1.11:lobon"; # TODO for https://gitea.mathebau.de/Fachschaft/nixConfig/issues/33
startAt = "daily";
user = "mailman";
group = "mailman";
user = "root";
group = "root";
};
};
}