Merge pull request #188771 from K900/vaultwarden-permissions

nixos/vaultwarden: protect the default data directory more
2022-08-30 09:41:15 +03:00
parent 70d6e6063b a7bfb90ea8
commit fcea1ef75f
1 changed files with 1 additions and 0 deletions
@@ -196,6 +196,7 @@ ADMIN_TOKEN=...copy-paste a unique generated secret token here...
        ProtectSystem = "strict";
        AmbientCapabilities = "CAP_NET_BIND_SERVICE";
        StateDirectory = "bitwarden_rs";
+        StateDirectoryMode = "0700";
      };
      wantedBy = [ "multi-user.target" ];
    };