nixos/glitchtip: fix sourcemap uploads

This commit is contained in:
Defelo
2025-08-31 18:03:31 +02:00
parent e9de9b50ce
commit 95968f2f73

View File

@@ -189,6 +189,7 @@ in
StateDirectory = "glitchtip";
EnvironmentFile = cfg.environmentFiles;
WorkingDirectory = "${pkg}/lib/glitchtip";
BindPaths = [ "/var/lib/glitchtip/uploads:${pkg}/lib/glitchtip/uploads" ];
# hardening
AmbientCapabilities = "";
@@ -220,6 +221,7 @@ in
"@system-service"
"~@privileged"
"~@resources"
"@chown"
];
UMask = "0077";
};
@@ -271,7 +273,6 @@ in
users.users = lib.mkIf (cfg.user == "glitchtip") {
glitchtip = {
home = "/var/lib/glitchtip";
group = cfg.group;
extraGroups = lib.optionals cfg.redis.createLocally [ "redis-glitchtip" ];
isSystemUser = true;
@@ -280,6 +281,8 @@ in
users.groups = lib.mkIf (cfg.group == "glitchtip") { glitchtip = { }; };
systemd.tmpfiles.settings.glitchtip."/var/lib/glitchtip/uploads".d = { inherit (cfg) user group; };
environment.systemPackages =
let
glitchtip-manage = pkgs.writeShellScriptBin "glitchtip-manage" ''