services.xray: pass the settings file with systemd loadCredential (#368763)

2025-01-25 22:29:58 +01:00
parent c32142f4c3 167d6634f8
commit 99c172d777
1 changed files with 4 additions and 1 deletions
@@ -80,9 +80,12 @@ with lib;
      description = "xray Daemon";
      after = [ "network.target" ];
      wantedBy = [ "multi-user.target" ];
+      script = ''
+        exec "${cfg.package}/bin/xray" -config "$CREDENTIALS_DIRECTORY/config.json"
+      '';
      serviceConfig = {
        DynamicUser = true;
-        ExecStart = "${cfg.package}/bin/xray -config ${settingsFile}";
+        LoadCredential = "config.json:${settingsFile}";
        CapabilityBoundingSet = "CAP_NET_ADMIN CAP_NET_BIND_SERVICE";
        AmbientCapabilities = "CAP_NET_ADMIN CAP_NET_BIND_SERVICE";
        NoNewPrivileges = true;