nixos/ddclient: make RuntimeDirectory private

ddclient will raise a warning if /run/ddclient/ is world-readable
6 years ago · f76a9eb526
parent 9a7bca27cc
commit f76a9eb526
1 changed files with 1 additions and 0 deletions
--- a/nixos/modules/services/networking/ddclient.nix
+++ b/nixos/modules/services/networking/ddclient.nix
@ -182,6 +182,7 @@ with lib;
      serviceConfig = rec {
        DynamicUser = true;
        RuntimeDirectory = StateDirectory;
+        RuntimeDirectoryMode = "0750";
        StateDirectory = builtins.baseNameOf dataDir;
        Type = "oneshot";
        ExecStartPre = "!${lib.getBin pkgs.coreutils}/bin/install -m666 ${cfg.configFile} /run/${RuntimeDirectory}/ddclient.conf";