secret file optional
This commit is contained in:
parent
e924bf1db6
commit
62676eaaa3
1 changed files with 3 additions and 2 deletions
|
|
@ -84,7 +84,6 @@ in
|
|||
serviceConfig = {
|
||||
Type = "simple";
|
||||
ExecStart = lib.getExe pkgs.mail-quota-warning;
|
||||
EnvironmentFile = [ cfg.secrets ];
|
||||
|
||||
# hardening
|
||||
AmbientCapabilities = "";
|
||||
|
|
@ -115,6 +114,8 @@ in
|
|||
SystemCallArchitectures = "native";
|
||||
SystemCallFilter = [ "@system-service" "~@privileged" ];
|
||||
UMask = "0077";
|
||||
} // lib.optionalAttrs (cfg.secretFile != [ ]) {
|
||||
EnvironmentFile = cfg.secretFile;
|
||||
};
|
||||
};
|
||||
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue