nixos/heartbeat: replace deprecated usage of PermissionsStartOnly
see https://github.com/NixOS/nixpkgs/issues/53852
This commit is contained in:
parent
73342be85b
commit
191e4b0755
@ -54,16 +54,18 @@ in
|
|||||||
|
|
||||||
config = mkIf cfg.enable {
|
config = mkIf cfg.enable {
|
||||||
|
|
||||||
|
systemd.tmpfiles.rules = [
|
||||||
|
"d '${cfg.stateDir}' - nobody nogroup - -"
|
||||||
|
];
|
||||||
|
|
||||||
systemd.services.heartbeat = with pkgs; {
|
systemd.services.heartbeat = with pkgs; {
|
||||||
description = "heartbeat log shipper";
|
description = "heartbeat log shipper";
|
||||||
wantedBy = [ "multi-user.target" ];
|
wantedBy = [ "multi-user.target" ];
|
||||||
preStart = ''
|
preStart = ''
|
||||||
mkdir -p "${cfg.stateDir}"/{data,logs}
|
mkdir -p "${cfg.stateDir}"/{data,logs}
|
||||||
chown nobody:nogroup "${cfg.stateDir}"/{data,logs}
|
|
||||||
'';
|
'';
|
||||||
serviceConfig = {
|
serviceConfig = {
|
||||||
User = "nobody";
|
User = "nobody";
|
||||||
PermissionsStartOnly = true;
|
|
||||||
AmbientCapabilities = "cap_net_raw";
|
AmbientCapabilities = "cap_net_raw";
|
||||||
ExecStart = "${pkgs.heartbeat}/bin/heartbeat -c \"${heartbeatYml}\" -path.data \"${cfg.stateDir}/data\" -path.logs \"${cfg.stateDir}/logs\"";
|
ExecStart = "${pkgs.heartbeat}/bin/heartbeat -c \"${heartbeatYml}\" -path.data \"${cfg.stateDir}/data\" -path.logs \"${cfg.stateDir}/logs\"";
|
||||||
};
|
};
|
||||||
|
Loading…
x
Reference in New Issue
Block a user