diff --git a/nixos/modules/services/misc/paperless.nix b/nixos/modules/services/misc/paperless.nix index f03d8f5db551..7cb95a2534cf 100644 --- a/nixos/modules/services/misc/paperless.nix +++ b/nixos/modules/services/misc/paperless.nix @@ -40,8 +40,9 @@ let exec ${cfg.package}/bin/paperless-ngx "$@" ''; - # Secure the services defaultServiceConfig = { + Slice = "system-paperless.slice"; + # Secure the services ReadWritePaths = [ cfg.consumptionDir cfg.dataDir @@ -232,6 +233,11 @@ in config = mkIf cfg.enable { services.redis.servers.paperless.enable = mkIf enableRedis true; + systemd.slices.system-paperless = { + description = "Paperless slice"; + documentation = [ "https://paperless.readthedocs.io" ]; + }; + systemd.tmpfiles.settings."10-paperless" = let defaultRule = { inherit (cfg) user;