nixos/prometheus: allow state access for service only

There is no reason for Prometheus state files to be world-readable.
2021-06-21 10:16:47 +02:00
parent 44b5c74960
commit 447b1cf03d
1 changed files with 1 additions and 0 deletions
@@ -945,6 +945,7 @@ in {
        RuntimeDirectoryMode = "0700";
        WorkingDirectory = workingDir;
        StateDirectory = cfg.stateDir;
+        StateDirectoryMode = "0700";
      };
    };
  };