diff options
| author | makefu <github@syntax-fehler.de> | 2019-09-06 15:11:25 +0200 |
|---|---|---|
| committer | makefu <github@syntax-fehler.de> | 2019-09-06 15:11:25 +0200 |
| commit | 8901bab8ad2f1db1ac7a1fabec091be3a14a1c20 (patch) | |
| tree | 1116f0bc3ad2da388a6d066f95a55740baf1865f /krebs/3modules/syncthing.nix | |
| parent | fce2c4275caf7df064fb13a4280291a9aefaef1f (diff) | |
| parent | e388d02623b98bad5db52b29ea1ef1f494fddae8 (diff) | |
Merge remote-tracking branch 'tv/master'
Diffstat (limited to 'krebs/3modules/syncthing.nix')
| -rw-r--r-- | krebs/3modules/syncthing.nix | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/krebs/3modules/syncthing.nix b/krebs/3modules/syncthing.nix index 939c8fdd..799ed7ed 100644 --- a/krebs/3modules/syncthing.nix +++ b/krebs/3modules/syncthing.nix @@ -176,6 +176,7 @@ in config = mkIf kcfg.enable { systemd.services.syncthing = mkIf (kcfg.cert != null || kcfg.key != null) { + serviceConfig.PermissionsStartOnly = mkDefault true; preStart = '' ${optionalString (kcfg.cert != null) '' cp ${toString kcfg.cert} ${scfg.configDir}/cert.pem |