Commit 6cff5881 authored by Paul Meyer's avatar Paul Meyer
Browse files

nixos/gonic: remove DynamicUser 



It's not possible to let a user hand in paths that gonic should
write to if DynamicUser is used, remove it. The service should
still be sufficiently sandboxed as using chroot and only binding
paths selectively.

Signed-off-by: default avatarPaul Meyer <katexochen0@gmail.com>
parent 195c9839

nixos/modules/services/audio/gonic.nix

+0 −1
Original line number Diff line number Diff line
@@ -65,7 +65,6 @@ in 
            ) cfg.settings;

          in

          "${lib.getExe cfg.package} -config-path ${settingsFormat.generate "gonic" filteredSettings}";

        DynamicUser = true;

        StateDirectory = "gonic";

        CacheDirectory = "gonic";

        WorkingDirectory = "/var/lib/gonic";