nixos/nginx-sso: fix '/run' mode (#464126)

2025-11-22 22:45:10 +00:00
parent ee48c23c08 1ec792c5c2
commit 77c0765854
1 changed files with 1 additions and 0 deletions
@@ -65,6 +65,7 @@ in
        StateDirectory = "nginx-sso";
        WorkingDirectory = "/var/lib/nginx-sso";
        RuntimeDirectory = "nginx-sso";
+        RuntimeDirectoryMode = "0700"; # Contains secrets
        ExecStart = ''
          ${lib.getExe cfg.package} \
            --config ${configPath} \