Merge pull request #310298 from rouven0/portunus-dex

nixos/portunus: fix dangling service files for dex
This commit is contained in:
Nick Cao 2024-05-09 09:50:54 -04:00 committed by GitHub
commit fe4d8b1b73
No known key found for this signature in database
GPG key ID: B5690EEEBB952194

View file

@ -231,12 +231,14 @@ in
};
systemd.services = {
dex.serviceConfig = mkIf cfg.dex.enable {
# `dex.service` is super locked down out of the box, but we need some
# place to write the SQLite database. This creates $STATE_DIRECTORY below
# /var/lib/private because DynamicUser=true, but it gets symlinked into
# /var/lib/dex inside the unit
StateDirectory = "dex";
dex = mkIf cfg.dex.enable {
serviceConfig = {
# `dex.service` is super locked down out of the box, but we need some
# place to write the SQLite database. This creates $STATE_DIRECTORY below
# /var/lib/private because DynamicUser=true, but it gets symlinked into
# /var/lib/dex inside the unit
StateDirectory = "dex";
};
};
portunus = {