modules: services: woodpecker: use 'path' option
All checks were successful
ci/woodpecker/push/check Pipeline was successful
All checks were successful
ci/woodpecker/push/check Pipeline was successful
One less thing to modify in the systemd service.
This commit is contained in:
parent
f3f8c8fc3f
commit
e979589174
|
@ -21,6 +21,17 @@ in
|
||||||
PAGER = "cat";
|
PAGER = "cat";
|
||||||
};
|
};
|
||||||
|
|
||||||
|
path = with pkgs; [
|
||||||
|
woodpecker-plugin-git
|
||||||
|
bash
|
||||||
|
coreutils
|
||||||
|
git
|
||||||
|
git-lfs
|
||||||
|
gnutar
|
||||||
|
gzip
|
||||||
|
nix
|
||||||
|
];
|
||||||
|
|
||||||
environmentFile = [ cfg.sharedSecretFile ];
|
environmentFile = [ cfg.sharedSecretFile ];
|
||||||
};
|
};
|
||||||
};
|
};
|
||||||
|
@ -30,17 +41,6 @@ in
|
||||||
# Might break deployment
|
# Might break deployment
|
||||||
restartIfChanged = false;
|
restartIfChanged = false;
|
||||||
|
|
||||||
path = with pkgs; [
|
|
||||||
woodpecker-plugin-git
|
|
||||||
bash
|
|
||||||
coreutils
|
|
||||||
git
|
|
||||||
git-lfs
|
|
||||||
gnutar
|
|
||||||
gzip
|
|
||||||
nix
|
|
||||||
];
|
|
||||||
|
|
||||||
serviceConfig = {
|
serviceConfig = {
|
||||||
# Same option as upstream, without @setuid
|
# Same option as upstream, without @setuid
|
||||||
SystemCallFilter = lib.mkForce "~@clock @privileged @cpu-emulation @debug @keyring @module @mount @obsolete @raw-io @reboot @swap";
|
SystemCallFilter = lib.mkForce "~@clock @privileged @cpu-emulation @debug @keyring @module @mount @obsolete @raw-io @reboot @swap";
|
||||||
|
|
Loading…
Reference in a new issue