harden
This commit is contained in:
parent
6002f7a32e
commit
092d7a3d47
|
@ -9,11 +9,23 @@ in {
|
||||||
ddns-updater-updated =
|
ddns-updater-updated =
|
||||||
pkgs.callPackage ../../packages/ddns-updater.nix { };
|
pkgs.callPackage ../../packages/ddns-updater.nix { };
|
||||||
in {
|
in {
|
||||||
|
|
||||||
|
users.users.ddns-updater = { group = "ddns-updater"; };
|
||||||
|
users.groups.ddns-updater = { };
|
||||||
|
|
||||||
ddns-updater = {
|
ddns-updater = {
|
||||||
enable = true;
|
enable = true;
|
||||||
package = ddns-updater-updated;
|
package = ddns-updater-updated;
|
||||||
environment = { "PEROID" = "5m"; };
|
environment = { "PEROID" = "5m"; };
|
||||||
};
|
};
|
||||||
|
|
||||||
|
systemd.services.ddns-updater = {
|
||||||
|
serviceConfig = {
|
||||||
|
DynamicUser = lib.mkForce false;
|
||||||
|
User = "ddns-updater";
|
||||||
|
Group = "ddns-updater";
|
||||||
|
};
|
||||||
|
};
|
||||||
nginx.virtualHosts = {
|
nginx.virtualHosts = {
|
||||||
"ddns.sako.box" = {
|
"ddns.sako.box" = {
|
||||||
locations."/" = { proxyPass = "http://localhost:8000"; };
|
locations."/" = { proxyPass = "http://localhost:8000"; };
|
||||||
|
|
Loading…
Reference in a new issue