1
0
Fork 0
mirror of https://codeberg.org/demostf/api.git synced 2026-08-02 12:24:52 +02:00

separate key files for module

This commit is contained in:
Robin Appelman 2025-05-19 19:49:43 +02:00
commit 0c4f8e9922
4 changed files with 62 additions and 20 deletions

View file

@ -85,7 +85,6 @@
"pm.max_spare_servers" = "15";
"catch_workers_output" = "yes";
"listen.owner" = "nginx";
"listen.group" = "nginx";
};
phpEnv = {
BASE_HOST = "demos.tf";
@ -97,12 +96,20 @@
DB_DATABASE = "demostf";
DB_USERNAME = "demostf";
APP_ROOT = "http://localhost";
EDIT_SECRET = "edit";
EDIT_KEY = "/$CREDENTIALS_DIRECTORY/edit_key";
PARSER_PATH = lib.getExe pkgs.demostf-parser;
};
user = "demostf";
group = "demostf";
};
systemd.services.phpfpm-demostf-api.serviceConfig = {
User = "demostf";
AmbientCapabilities = "CAP_CHOWN";
NoNewPrivileges = true;
LoadCredential = [
"edit_key:${pkgs.writeText "edit-key.conf" "edit"}"
];
};
};
};