diff options
| author | Franck Cuny <franck@fcuny.net> | 2023-01-07 13:37:21 -0800 |
|---|---|---|
| committer | Franck Cuny <franck@fcuny.net> | 2023-01-07 13:37:21 -0800 |
| commit | 0c9654585c8b7d6e4b270ce3449090be6185553c (patch) | |
| tree | bfc05ccf872a8865e06769853d89f29f4ce133f9 /modules | |
| parent | fix(modules/unifi): remove the poller (diff) | |
| download | infra-0c9654585c8b7d6e4b270ce3449090be6185553c.tar.gz | |
fix(modules/sendsms): run it as root for now
I need to figure a way to make it run as a dynamic user, while still
having access to the credentials for twilio, while not changing the
permissions to the file.
Diffstat (limited to 'modules')
| -rw-r--r-- | modules/services/sendsms/default.nix | 2 |
1 files changed, 0 insertions, 2 deletions
diff --git a/modules/services/sendsms/default.nix b/modules/services/sendsms/default.nix index 1238c5c..9d3491a 100644 --- a/modules/services/sendsms/default.nix +++ b/modules/services/sendsms/default.nix @@ -17,7 +17,6 @@ in path = [ pkgs.sendsms ]; serviceConfig = { Type = "oneshot"; - WorkingDirectory = cfg.stateDir; ExecStart = "${pkgs.sendsms}/bin/sendsms --config ${secrets."sendsms/config".path} reboot"; Restart = "on-failure"; @@ -32,7 +31,6 @@ in CapabilityBoundingSet = ""; # Security - DynamicUser = true; NoNewPrivileges = true; # Sandboxing |