harden
This commit is contained in:
parent
6002f7a32e
commit
092d7a3d47
|
@ -9,11 +9,23 @@ in {
|
|||
ddns-updater-updated =
|
||||
pkgs.callPackage ../../packages/ddns-updater.nix { };
|
||||
in {
|
||||
|
||||
users.users.ddns-updater = { group = "ddns-updater"; };
|
||||
users.groups.ddns-updater = { };
|
||||
|
||||
ddns-updater = {
|
||||
enable = true;
|
||||
package = ddns-updater-updated;
|
||||
environment = { "PEROID" = "5m"; };
|
||||
};
|
||||
|
||||
systemd.services.ddns-updater = {
|
||||
serviceConfig = {
|
||||
DynamicUser = lib.mkForce false;
|
||||
User = "ddns-updater";
|
||||
Group = "ddns-updater";
|
||||
};
|
||||
};
|
||||
nginx.virtualHosts = {
|
||||
"ddns.sako.box" = {
|
||||
locations."/" = { proxyPass = "http://localhost:8000"; };
|
||||
|
|
Loading…
Reference in a new issue