rebmit/nixos-config
1
0
Fork 0
Code Issues Pull requests Actions Packages Projects Releases Wiki Activity

services/nscd: use tmpfiles for proper lifetime guarantees

Browse source
This commit is contained in:
Lu Wang 2024-12-30 02:27:37 +08:00
parent 0c28d393fa
commit a335722afd
Signed by: rebmit
SSH key fingerprint: SHA256:3px8QV1zEerIrEWHaqtH5rR9kjetyRST5EipOPrd+bU
1 changed files with 15 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

17
nixos/profiles/services/nscd/default.nix
View file

@ -1,4 +1,9 @@
{ lib, mylib, ... }:
{
config,
lib,
mylib,
...
}:
{
services.nscd = {
enable = true;
@ -6,7 +11,15 @@
};
systemd.services.nscd.serviceConfig = mylib.misc.serviceHardened // {
RuntimeDirectoryPreserve = true;
RuntimeDirectory = lib.mkForce "";
ProtectHome = lib.mkForce true;
};
systemd.tmpfiles.settings."20-nscd" = {
"/run/nscd".d = {
mode = "0755";
user = config.services.nscd.user;
group = config.services.nscd.group;
};
};
}