cluster/services/ipfs: use strictMounts

This commit is contained in:
Max Headroom 2023-08-23 17:04:01 +02:00
parent 4eaa162819
commit a79b829da5

View file

@ -135,7 +135,7 @@ in
systemd.services.ipfs = { systemd.services.ipfs = {
unitConfig.RequiresMountsFor = cfg.dataDir; strictMounts = [ cfg.dataDir ];
serviceConfig = { serviceConfig = {
Slice = "remotefshost.slice"; Slice = "remotefshost.slice";
AmbientCapabilities = [ "CAP_NET_BIND_SERVICE" ]; AmbientCapabilities = [ "CAP_NET_BIND_SERVICE" ];