summaryrefslogtreecommitdiffstats
path: root/krebs/3modules/syncthing.nix
diff options
context:
space:
mode:
authormakefu <github@syntax-fehler.de>2019-09-06 15:11:25 +0200
committermakefu <github@syntax-fehler.de>2019-09-06 15:11:25 +0200
commit8901bab8ad2f1db1ac7a1fabec091be3a14a1c20 (patch)
tree1116f0bc3ad2da388a6d066f95a55740baf1865f /krebs/3modules/syncthing.nix
parentfce2c4275caf7df064fb13a4280291a9aefaef1f (diff)
parente388d02623b98bad5db52b29ea1ef1f494fddae8 (diff)
Merge remote-tracking branch 'tv/master'
Diffstat (limited to 'krebs/3modules/syncthing.nix')
-rw-r--r--krebs/3modules/syncthing.nix1
1 files changed, 1 insertions, 0 deletions
diff --git a/krebs/3modules/syncthing.nix b/krebs/3modules/syncthing.nix
index 939c8fddf..799ed7eda 100644
--- a/krebs/3modules/syncthing.nix
+++ b/krebs/3modules/syncthing.nix
@@ -176,6 +176,7 @@ in
config = mkIf kcfg.enable {
systemd.services.syncthing = mkIf (kcfg.cert != null || kcfg.key != null) {
+ serviceConfig.PermissionsStartOnly = mkDefault true;
preStart = ''
${optionalString (kcfg.cert != null) ''
cp ${toString kcfg.cert} ${scfg.configDir}/cert.pem