modules: services: woodpecker: use 'path' option
All checks were successful
ci/woodpecker/push/check Pipeline was successful

One less thing to modify in the systemd service.
This commit is contained in:
Bruno BELANYI 2023-09-13 12:40:19 +00:00
parent f3f8c8fc3f
commit e979589174

View file

@ -21,6 +21,17 @@ in
PAGER = "cat";
};
path = with pkgs; [
woodpecker-plugin-git
bash
coreutils
git
git-lfs
gnutar
gzip
nix
];
environmentFile = [ cfg.sharedSecretFile ];
};
};
@ -30,17 +41,6 @@ in
# Might break deployment
restartIfChanged = false;
path = with pkgs; [
woodpecker-plugin-git
bash
coreutils
git
git-lfs
gnutar
gzip
nix
];
serviceConfig = {
# Same option as upstream, without @setuid
SystemCallFilter = lib.mkForce "~@clock @privileged @cpu-emulation @debug @keyring @module @mount @obsolete @raw-io @reboot @swap";