cafkafk/nixpkgs
cafkafk/nixpkgs
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions 2

nixos/vaultwarden: protect the default data directory more

Browse source 
Fixes #179415
This commit is contained in:
K900 2022-08-29 09:26:31 +03:00
parent f09f7f1778
commit a7bfb90ea8
1 changed files with 1 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

1
nixos/modules/services/security/vaultwarden/default.nix
View file

@ -196,6 +196,7 @@ ADMIN_TOKEN=...copy-paste a unique generated secret token here...
ProtectSystem = "strict";
AmbientCapabilities = "CAP_NET_BIND_SERVICE";
StateDirectory = "bitwarden_rs";
StateDirectoryMode = "0700";
};
wantedBy = [ "multi-user.target" ];
};