From 2a8bf9777d790bc4a0bc77e523609f1d40694d5b Mon Sep 17 00:00:00 2001 From: Max Date: Mon, 13 Jun 2022 21:14:49 +0200 Subject: [PATCH] nixos/ipfs: do not leak config to journal on startup The preStart script for the IPFS service will print parts of the configuration to stdout (and therefore, the journal) when applying profiles on startup. This may lead to unwanted disclosure of private information, such as remote pinning service API keys. Fix by sending stdout to /dev/null. --- nixos/modules/services/network-filesystems/ipfs.nix | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/nixos/modules/services/network-filesystems/ipfs.nix b/nixos/modules/services/network-filesystems/ipfs.nix index 395b9788855f..a5f8f55a682c 100644 --- a/nixos/modules/services/network-filesystems/ipfs.nix +++ b/nixos/modules/services/network-filesystems/ipfs.nix @@ -257,7 +257,7 @@ in '' + optionalString cfg.autoMigrate '' ${pkgs.ipfs-migrator}/bin/fs-repo-migrations -to '${cfg.package.repoVersion}' -y '' + '' - ipfs --offline config profile apply ${profile} + ipfs --offline config profile apply ${profile} >/dev/null fi '' + optionalString cfg.autoMount '' ipfs --offline config Mounts.FuseAllowOther --json true