alex/infrastructure
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

environment

Browse Source
This commit is contained in:
Alex Mickelson
2026-02-07 13:54:49 -07:00
parent 0ce24bad4e
commit eb111fb5f8
1 changed files with 5 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

10
nix/modules/gitea-runner.nix
View File

@@ -52,15 +52,15 @@
systemd.tmpfiles.rules = [
"d /data/runner 0755 gitea-runner gitea-runner -"
"f /data/runner/gitea-infrastructure-token.txt 0600 gitea-runner gitea-runner -"
"d /home/gitea-runner 0755 gitea-runner gitea-runner -"
];
systemd.services.gitea-runner-infrastructure.serviceConfig = {
ReadWritePaths = lib.mkForce [ ];
StateDirectory = lib.mkForce "gitea-runner-infrastructure";
StateDirectoryMode = lib.mkForce "0755";
# Let systemd create the working directory with proper permissions
WorkingDirectory = lib.mkForce "/home/gitea-runner";
WorkingDirectoryMode = lib.mkForce "0755";
# ADD THIS - set the working directory
WorkingDirectory = lib.mkForce "/var/lib/gitea-runner-infrastructure/infrastructure";
ReadWritePaths = lib.mkForce [ ];
# Disable all sandboxing features
DynamicUser = lib.mkForce false;