public/nixpkgs
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

nixos/unit: run Unit as root

Browse Source 
In latest release recommended not set ambient capabilities.
This commit is contained in:
Izorkin 2020-04-14 23:33:33 +03:00
parent 3eb6012b64
commit cfad151ac5
1 changed files with 0 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
nixos/modules/services/web-servers/unit/default.nix
View File

@ -108,11 +108,6 @@ in {
ExecStop = '' ExecStop = ''
${pkgs.curl}/bin/curl -X DELETE --unix-socket '/run/unit/control.unit.sock' 'http://localhost/config' ${pkgs.curl}/bin/curl -X DELETE --unix-socket '/run/unit/control.unit.sock' 'http://localhost/config'
''; '';
# User and group
User = cfg.user;
Group = cfg.group;
# Capabilities
AmbientCapabilities = [ "CAP_NET_BIND_SERVICE" "CAP_SETGID" "CAP_SETUID" ];
# Runtime directory and mode # Runtime directory and mode
RuntimeDirectory = "unit"; RuntimeDirectory = "unit";
RuntimeDirectoryMode = "0750"; RuntimeDirectoryMode = "0750";