home

commit ecfe085f3bf7833cf66a7876fe117570bd264ad6
parent 49ab6a11fd28441bd90255851ab30d741db8959c
Author: Vincent Demeester <vincent@sbr.pm>
Date:   Mon,  5 Oct 2020 12:27:28 +0200

systemd/kerkouane: do not protect home…

… find a better way in the future.

Signed-off-by: Vincent Demeester <vincent@sbr.pm>

Diffstat:
M
systems/kerkouane.nix
 | 
3
++-

1 file changed, 2 insertions(+), 1 deletion(-)
diff --git a/systems/kerkouane.nix b/systems/kerkouane.nix
@@ -92,7 +92,8 @@ in
     #};
   };
   security.pam.enableSSHAgentAuth = true;
-  systemd.services.nginx.serviceConfig.ReadWritePaths = [ "/home/vincent/desktop/sites" ];
+  #systemd.services.nginx.serviceConfig.ReadWritePaths = [ "/home/vincent/desktop/sites" ];
+  systemd.services.nginx.serviceConfig.ProtectHome = lib.mkForce false;
   services = {
     govanityurl = {
       enable = true;