fix(modules): set umask for narbridge service

This commit is contained in:
Yureka 2024-07-22 02:14:46 +02:00
parent 608f8008eb
commit 2b485d822c

View file

@ -156,6 +156,7 @@ in
EXPERIMENTAL_STORE_COMPOSITION = settingsFormat.generate "Config.toml" cache.nar-bridge-composition; EXPERIMENTAL_STORE_COMPOSITION = settingsFormat.generate "Config.toml" cache.nar-bridge-composition;
}; };
serviceConfig = { serviceConfig = {
UMask = "007";
ExecStart = "${pkgs.tvix}/bin/nar-bridge --otlp=false --listen-address=\"${cache.narBridgeListenAddress}\""; ExecStart = "${pkgs.tvix}/bin/nar-bridge --otlp=false --listen-address=\"${cache.narBridgeListenAddress}\"";
DynamicUser = true; DynamicUser = true;
Group = "tvix-castore"; Group = "tvix-castore";