diff options
| author | tv <tv@krebsco.de> | 2019-08-02 17:04:39 +0200 |
|---|---|---|
| committer | tv <tv@krebsco.de> | 2019-08-02 17:04:39 +0200 |
| commit | 7c522820bd7858580567ab7d436f586ee5a139ce (patch) | |
| tree | 92a448d08f4e34a5bfec172daed334ddd0c97049 /krebs/3modules/syncthing.nix | |
| parent | b92610eacb6c88fe28f46a91ee8697cb542ab6aa (diff) | |
| parent | 2885fbd942163d733586cd966c76ccf9159ae208 (diff) | |
Merge remote-tracking branch 'prism/master'
Diffstat (limited to 'krebs/3modules/syncthing.nix')
| -rw-r--r-- | krebs/3modules/syncthing.nix | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/krebs/3modules/syncthing.nix b/krebs/3modules/syncthing.nix index 939c8fddf..799ed7eda 100644 --- a/krebs/3modules/syncthing.nix +++ b/krebs/3modules/syncthing.nix @@ -176,6 +176,7 @@ in config = mkIf kcfg.enable { systemd.services.syncthing = mkIf (kcfg.cert != null || kcfg.key != null) { + serviceConfig.PermissionsStartOnly = mkDefault true; preStart = '' ${optionalString (kcfg.cert != null) '' cp ${toString kcfg.cert} ${scfg.configDir}/cert.pem |