nixos/sing-box: generate config file into RuntimeDirectory

2024-10-05 18:18:23 -04:00
parent 5f821de20c
commit 9e012ecbf2
1 changed files with 11 additions and 5 deletions
@@ -55,11 +55,17 @@ in
    systemd.packages = [ cfg.package ];

    systemd.services.sing-box = {
-      preStart = ''
-        umask 0077
-        mkdir -p /etc/sing-box
-        ${utils.genJqSecretsReplacementSnippet cfg.settings "/etc/sing-box/config.json"}
-      '';
+      preStart = utils.genJqSecretsReplacementSnippet cfg.settings "/run/sing-box/config.json";
+      serviceConfig = {
+        StateDirectory = "sing-box";
+        StateDirectoryMode = "0700";
+        RuntimeDirectory = "sing-box";
+        RuntimeDirectoryMode = "0700";
+        ExecStart = [
+          ""
+          "${lib.getExe cfg.package} -D \${STATE_DIRECTORY} -C \${RUNTIME_DIRECTORY} run"
+        ];
+      };
      wantedBy = [ "multi-user.target" ];
    };
  };