nixos/gitea: sort things more natural

(cherry picked from commit f089a37e2c5cab7fcb9997c985eb815ea31782f6)
2025-12-11 02:28:51 +01:00
parent 96d5386452
commit e954aba66f
1 changed files with 3 additions and 4 deletions
@@ -913,11 +913,10 @@ in
        ]
        ++ lib.optional (useSendmail && config.services.postfix.enable) "/var/lib/postfix/queue/maildrop";
        UMask = "0027";
-        # Capabilities
-        CapabilityBoundingSet = "";
-        # Security
-        NoNewPrivileges = !useSendmail;
+
        # Sandboxing
+        CapabilityBoundingSet = "";
+        NoNewPrivileges = !useSendmail;
        ProtectSystem = "strict";
        ProtectHome = true;
        PrivateTmp = true;