diff --git a/module.nix b/module.nix index 93d5a30..54ebd80 100644 --- a/module.nix +++ b/module.nix @@ -62,25 +62,24 @@ in { environment = { PRICEBOT_EXCHANGE_HOST = cfg.exchange-host; PRICEBOT_BEBOT_URL = cfg.mattermost-url; - # PRICEBOT_BEBOT_AUTH_TOKEN_FILE = "%d/auth.token"; + PRICEBOT_BEBOT_AUTH_TOKEN_FILE = "%d/auth.token"; PRICEBOT_BEBOT_CHANNEL_ID = opts.mattermost-channel-id; PRICEBOT_TARGET_CURRENCY = opts.currency; PRICEBOT_NOTIFY_USER = opts.notify-user; }; serviceConfig = { - ExecStart = - "${pricebot}/bin/pricebot \${CREDENTIALS_DIRECTORY}/auth.token"; + ExecStart = "${pricebot}/bin/pricebot"; DynamicUser = true; - PrivateTmp = true; - PrivateDevices = true; - ProtectSystem = "strict"; - ProtectControlGroups = true; - ProtectKernelTunables = true; - ProtectKernelModules = true; - ProtectHostname = true; - ProtectHome = true; - ProtectClock = true; - ProtectKernelLogs = true; + # PrivateTmp = true; + # PrivateDevices = true; + # ProtectSystem = "strict"; + # ProtectControlGroups = true; + # ProtectKernelTunables = true; + # ProtectKernelModules = true; + # ProtectHostname = true; + # ProtectHome = true; + # ProtectClock = true; + # ProtectKernelLogs = true; Restart = "always"; StandardOutput = "journal"; };