Commit ecfe085f3bf7

Vincent Demeester <vincent@sbr.pm>
2020-10-05 12:27:28
systemd/kerkouane: do not protect home…
… find a better way in the future. Signed-off-by: Vincent Demeester <vincent@sbr.pm>
main
1 parent 49ab6a1
Changed files (1)
systems
kerkouane.nix
systems/kerkouane.nix
@@ -92,7 +92,8 @@ in
     #};
   };
   security.pam.enableSSHAgentAuth = true;
-  systemd.services.nginx.serviceConfig.ReadWritePaths = [ "/home/vincent/desktop/sites" ];
+  #systemd.services.nginx.serviceConfig.ReadWritePaths = [ "/home/vincent/desktop/sites" ];
+  systemd.services.nginx.serviceConfig.ProtectHome = lib.mkForce false;
   services = {
     govanityurl = {
       enable = true;