From a5c61fe6968ca98cf5959190478afea5d1307747 Mon Sep 17 00:00:00 2001
From: niten <niten@fudo.org>
Date: Thu, 31 Aug 2023 15:26:22 -0700
Subject: [PATCH] systemd belongs in configuration

---
 nextcloud-container.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/nextcloud-container.nix b/nextcloud-container.nix
index 97bfb9a..0c17601 100644
--- a/nextcloud-container.nix
+++ b/nextcloud-container.nix
@@ -142,6 +142,8 @@ in {
               configuration = {
                 boot.tmpOnTmpfs = true;
                 system.nssModules = lib.mkForce [ ];
+                systemd.services.nginx.serviceConfig.AmbientCapabilities =
+                  lib.mkForce [ "CAP_NET_BIND_SERVICE" ];
                 services.nginx = {
                   enable = true;
                   recommendedZstdSettings = true;
@@ -228,8 +230,6 @@ in {
                   };
                 };
               };
-              systemd.services.nginx.serviceConfig.AmbientCapabilities =
-                lib.mkForce [ "CAP_NET_BIND_SERVICE" ];
             };
             service = {
               useHostStore = true;