gador/nixpkgs
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

nixos/nextcloud: don't leak occ commands to journal (#515392)

Browse Source
This commit is contained in:
Maximilian Bosch
2026-05-22 14:15:31 +00:00
committed by GitHub
parent 2045fadf3e 85022a753c
commit 91dfc3d3d4
1 changed files with 5 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
nixos/modules/services/web-apps/nextcloud.md
+5
View File
@@ -68,6 +68,11 @@ It requires elevated permissions to become the `nextcloud` user. Given the way t
escalation is implemented, parameters passed via the environment to Nextcloud are
currently ignored, except for `OC_PASS` and `NC_PASS`.
::: {.warning}
When Polkit is enabled, the command being executed by `nextcloud-occ` might be logged
into the system's journal. Be careful to not leak secrets that way!
:::
Custom service units that need to run `nextcloud-occ` either need elevated privileges
or the systemd configuration from `nextcloud-setup.service` (recommended):