Elias Probst 3bd1c64a5b nixos/restic: use private tmp for service unit ...

To reduce the danger of accidentally exposing sensitive files processed
by a restic backup to other services/users, enable the `PrivateTmp=`
feature of restic service units, which provides a per service isolation
of `/tmp` and `/var/tmp`.

Co-authored-by: Daniel Nagy <danielnagy@posteo.de>

2023-04-30 10:39:29 +02:00

6.5 KiB

Raw Blame History

View Raw