diff options
| author | Skullheadx <admonty1@protonmail.com> | 2026-05-31 19:20:01 -0400 |
|---|---|---|
| committer | Skullheadx <admonty1@protonmail.com> | 2026-05-31 19:20:01 -0400 |
| commit | 9a940960448864e18978786c14e5ca5354603d2b (patch) | |
| tree | 9bee7d0863c5c68135cd1e92a18f648557e839b1 /hosts | |
| parent | gitweb (diff) | |
| download | nixos-9a940960448864e18978786c14e5ca5354603d2b.tar.gz nixos-9a940960448864e18978786c14e5ca5354603d2b.tar.bz2 nixos-9a940960448864e18978786c14e5ca5354603d2b.zip | |
nginx show all projects
Diffstat (limited to '')
| -rw-r--r-- | hosts/icon/configuration.nix | 7 |
1 files changed, 7 insertions, 0 deletions
diff --git a/hosts/icon/configuration.nix b/hosts/icon/configuration.nix index 0c6ad15..e089f6b 100644 --- a/hosts/icon/configuration.nix +++ b/hosts/icon/configuration.nix @@ -10,6 +10,12 @@ ]; users.groups.git = {}; + users.users.nginx.extraGroups = ["git"]; + systemd.services.nginx.serviceConfig = { + SupplementaryGroups = ["git"]; + ReadOnlyPaths = ["/srv/git" "/srv"]; + }; + # systemd.services.fcgiwrap.serviceConfig.ReadOnlyPaths = ["/srv/git"]; # Define a user account. Don't forget to set a password with ‘passwd’. users.users = { andrew = { @@ -27,6 +33,7 @@ group = "git"; home = "/srv/git"; createHome = true; + homeMode = "755"; openssh.authorizedKeys.keys = [ "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPfIZMlXeTEi0YoOq36WNo6xPoolqvoS77ygtKaySkoG admonty1@protonmail.com" ]; |