do something to forgejo service
This commit is contained in:
parent
86b4cddbf4
commit
ff11165f04
|
@ -82,10 +82,13 @@ in {
|
||||||
journalmatch = _SYSTEMD_UNIT=forgejo.service
|
journalmatch = _SYSTEMD_UNIT=forgejo.service
|
||||||
'';
|
'';
|
||||||
};
|
};
|
||||||
systemd.services.forgejo.serviceConfig = {
|
systemd.services.forgejo = {
|
||||||
|
after = [ "postgresql.service" "redis-forgejo.service" ];
|
||||||
|
serviceConfig = {
|
||||||
AmbientCapabilities = lib.mkForce [ "CAP_NET_BIND_SERVICE" ];
|
AmbientCapabilities = lib.mkForce [ "CAP_NET_BIND_SERVICE" ];
|
||||||
CapabilityBoundingSet = lib.mkForce [ "CAP_NET_BIND_SERVICE" ];
|
CapabilityBoundingSet = lib.mkForce [ "CAP_NET_BIND_SERVICE" ];
|
||||||
PrivateUsers = lib.mkForce false;
|
PrivateUsers = lib.mkForce false;
|
||||||
};
|
};
|
||||||
};
|
};
|
||||||
|
};
|
||||||
}
|
}
|
||||||
|
|
Loading…
Reference in a new issue