mirror of
https://github.com/CHN-beta/nixpkgs.git
synced 2026-01-11 10:22:54 +08:00
nixos/glitchtip: fix sourcemap uploads
(cherry picked from commit 95968f2f73)
This commit is contained in:
committed by
github-actions[bot]
parent
9978b14017
commit
0cdcf4e6fb
@@ -189,6 +189,7 @@ in
|
||||
StateDirectory = "glitchtip";
|
||||
EnvironmentFile = cfg.environmentFiles;
|
||||
WorkingDirectory = "${pkg}/lib/glitchtip";
|
||||
BindPaths = [ "/var/lib/glitchtip/uploads:${pkg}/lib/glitchtip/uploads" ];
|
||||
|
||||
# hardening
|
||||
AmbientCapabilities = "";
|
||||
@@ -220,6 +221,7 @@ in
|
||||
"@system-service"
|
||||
"~@privileged"
|
||||
"~@resources"
|
||||
"@chown"
|
||||
];
|
||||
UMask = "0077";
|
||||
};
|
||||
@@ -271,7 +273,6 @@ in
|
||||
|
||||
users.users = lib.mkIf (cfg.user == "glitchtip") {
|
||||
glitchtip = {
|
||||
home = "/var/lib/glitchtip";
|
||||
group = cfg.group;
|
||||
extraGroups = lib.optionals cfg.redis.createLocally [ "redis-glitchtip" ];
|
||||
isSystemUser = true;
|
||||
@@ -280,6 +281,8 @@ in
|
||||
|
||||
users.groups = lib.mkIf (cfg.group == "glitchtip") { glitchtip = { }; };
|
||||
|
||||
systemd.tmpfiles.settings.glitchtip."/var/lib/glitchtip/uploads".d = { inherit (cfg) user group; };
|
||||
|
||||
environment.systemPackages =
|
||||
let
|
||||
glitchtip-manage = pkgs.writeShellScriptBin "glitchtip-manage" ''
|
||||
|
||||
Reference in New Issue
Block a user