nixos/nginx-sso: fix '/run' mode

2025-11-22 22:39:32 +00:00
parent 54b0f8b93a
commit 1ec792c5c2
1 changed files with 1 additions and 0 deletions
@@ -65,6 +65,7 @@ in
        StateDirectory = "nginx-sso";
        WorkingDirectory = "/var/lib/nginx-sso";
        RuntimeDirectory = "nginx-sso";
+        RuntimeDirectoryMode = "0700"; # Contains secrets
        ExecStart = ''
          ${lib.getExe cfg.package} \
            --config ${configPath} \