Kyren223/server
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Hardening

Browse Source
This commit is contained in:
Kyren223
2025-08-03 20:06:32 +03:00
parent 2e0e24b411
commit 8e8a2c9c3c
1 changed files with 2 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
nixosModules/eko.nix
View File

@@ -26,7 +26,8 @@
];
# Allow grafana access to the sqlite db
systemd.services.eko.serviceConfig.StateDirectoryMode = lib.mkForce 0755;
users.users.eko.extraGroups = [ "grafana" ];
systemd.services.eko.serviceConfig.StateDirectoryMode = lib.mkForce 0750;
systemd.services.grafana = {
serviceConfig = {
ProtectHome = lib.mkForce false;