nixos/miniflux: allow members of miniflux group to read runtime directory
Otherwise a proxy server that has the miniflux group cannot read files in the runtime directory like a socket miniflux can listen on.
This commit is contained in:
@@ -90,7 +90,7 @@ in
|
||||
User = "miniflux";
|
||||
DynamicUser = true;
|
||||
RuntimeDirectory = "miniflux";
|
||||
RuntimeDirectoryMode = "0700";
|
||||
RuntimeDirectoryMode = "0750";
|
||||
EnvironmentFile = cfg.adminCredentialsFile;
|
||||
# Hardening
|
||||
CapabilityBoundingSet = [ "" ];
|
||||
|
||||
Reference in New Issue
Block a user