syncthing: run preStart as root on 19.09

2019-07-15 18:26:30 +02:00 · 2019-07-15 18:26:30 +02:00 · 9bc7f594f5
commit 9bc7f594f5
parent 035cf33ab9
1 changed files with 1 additions and 0 deletions
--- a/krebs/3modules/syncthing.nix
+++ b/krebs/3modules/syncthing.nix
@ -176,6 +176,7 @@ in
  config = mkIf kcfg.enable {

    systemd.services.syncthing = mkIf (kcfg.cert != null || kcfg.key != null) {
+      serviceConfig.PermissionsStartOnly = mkDefault true;
      preStart = ''
        ${optionalString (kcfg.cert != null) ''
          cp ${toString kcfg.cert} ${scfg.configDir}/cert.pem