modules: services: woodpecker: use 'path' option
All checks were successful
ci/woodpecker/push/check Pipeline was successful
All checks were successful
ci/woodpecker/push/check Pipeline was successful
One less thing to modify in the systemd service.
This commit is contained in:
parent
f3f8c8fc3f
commit
e979589174
|
@ -21,6 +21,17 @@ in
|
|||
PAGER = "cat";
|
||||
};
|
||||
|
||||
path = with pkgs; [
|
||||
woodpecker-plugin-git
|
||||
bash
|
||||
coreutils
|
||||
git
|
||||
git-lfs
|
||||
gnutar
|
||||
gzip
|
||||
nix
|
||||
];
|
||||
|
||||
environmentFile = [ cfg.sharedSecretFile ];
|
||||
};
|
||||
};
|
||||
|
@ -30,17 +41,6 @@ in
|
|||
# Might break deployment
|
||||
restartIfChanged = false;
|
||||
|
||||
path = with pkgs; [
|
||||
woodpecker-plugin-git
|
||||
bash
|
||||
coreutils
|
||||
git
|
||||
git-lfs
|
||||
gnutar
|
||||
gzip
|
||||
nix
|
||||
];
|
||||
|
||||
serviceConfig = {
|
||||
# Same option as upstream, without @setuid
|
||||
SystemCallFilter = lib.mkForce "~@clock @privileged @cpu-emulation @debug @keyring @module @mount @obsolete @raw-io @reboot @swap";
|
||||
|
|
Loading…
Reference in a new issue