environment

This commit is contained in:
2026-02-07 13:37:39 -07:00
parent 1f92a821fb
commit 5b50211103

View File

@@ -338,21 +338,16 @@
PrivateMounts = false;
PrivateUsers = false;
ProtectHome = false;
NoNewPrivileges = false; # Add this
NoNewPrivileges = false;
# Ensure access to Nix store and system paths
# Make sure the service can see /nix/store
BindReadOnlyPaths = [
"/nix/store"
"/run/current-system"
];
# Set proper PATH
Environment = [
"PATH=/run/current-system/sw/bin:/nix/var/nix/profiles/default/bin:/usr/bin:/bin"
];
Restart = lib.mkForce "always";
};
users.users.gitea-runner = {
isNormalUser = true;
description = "Gitea Actions Runner";