From ef32ce14bb1ae92358eb4e13d556b21d2af370de Mon Sep 17 00:00:00 2001
From: chn <chn@chn.moe>
Date: Wed, 23 Aug 2023 16:52:23 +0800
Subject: [PATCH] try to fix rsshub services

---
 modules/services/rsshub.nix | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/modules/services/rsshub.nix b/modules/services/rsshub.nix
index 8972c30d..62a3db50 100644
--- a/modules/services/rsshub.nix
+++ b/modules/services/rsshub.nix
@@ -26,6 +26,9 @@ inputs:
 					Group = inputs.config.users.users.rsshub.group;
 					EnvironmentFile = inputs.config.sops.templates."rsshub/env".path;
 					ExecStart = "${inputs.pkgs.localPackages.rsshub}/bin/rsshub";
+					KillMode = "mixed"; 
+					CapabilityBoundingSet = [ "CAP_NET_BIND_SERVICE" ];
+					AmbientCapabilities = [ "CAP_NET_BIND_SERVICE" ];
 				};
 			};
 			sops =
@@ -44,6 +47,7 @@ inputs:
 						YOUTUBE_CLIENT_ID='${placeholder."rsshub/youtube-client-id"}'
 						YOUTUBE_CLIENT_SECRET='${placeholder."rsshub/youtube-client-secret"}'
 						YOUTUBE_REFRESH_TOKEN='${placeholder."rsshub/youtube-refresh-token"}'
+						NO_LOGFILES=true
 					'';
 				secrets = (listToAttrs (map (secret: { name = "rsshub/${secret}"; value = {}; })
 				[