mirror of
https://codeberg.org/icewind/ugc-scaper.git
synced 2026-06-03 18:24:10 +02:00
fmt
This commit is contained in:
parent
705d6c58e8
commit
4c876ae69c
6 changed files with 83 additions and 82 deletions
20
module.nix
20
module.nix
|
|
@ -1,12 +1,12 @@
|
|||
{ config
|
||||
, lib
|
||||
, pkgs
|
||||
, ...
|
||||
{
|
||||
config,
|
||||
lib,
|
||||
pkgs,
|
||||
...
|
||||
}:
|
||||
with lib; let
|
||||
cfg = config.services.ugc-api-server;
|
||||
in
|
||||
{
|
||||
in {
|
||||
options.services.ugc-api-server = {
|
||||
enable = mkEnableOption "ugc api server";
|
||||
|
||||
|
|
@ -30,9 +30,9 @@ in
|
|||
|
||||
config = mkIf cfg.enable {
|
||||
systemd.services."ugc-api-server" = {
|
||||
wantedBy = [ "multi-user.target" ];
|
||||
after = [ "network-online.target" ];
|
||||
wants = [ "network-online.target" ];
|
||||
wantedBy = ["multi-user.target"];
|
||||
after = ["network-online.target"];
|
||||
wants = ["network-online.target"];
|
||||
environment = {
|
||||
RUST_LOG = cfg.logLevel;
|
||||
PORT = toString cfg.port;
|
||||
|
|
@ -61,7 +61,7 @@ in
|
|||
RestrictAddressFamilies = "AF_INET AF_INET6";
|
||||
RestrictRealtime = true;
|
||||
ProtectProc = "noaccess";
|
||||
SystemCallFilter = [ "@system-service" "~@resources" "~@privileged" ];
|
||||
SystemCallFilter = ["@system-service" "~@resources" "~@privileged"];
|
||||
PrivateUsers = true;
|
||||
ProcSubset = "pid";
|
||||
};
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue