simon/nixos-config
simon/nixos-config
1
1
Fork 0
Code Issues 8 Pull requests Actions Projects Activity

renge/coturn: Fix ACME copying

Browse source 
Sandboxing requires + instead of ! for elevating permissions of
pre-start script.
This commit is contained in:
Simon Bruder 2024-12-15 17:03:39 +01:00
parent 90d3720a75
commit d23c15da90
Signed by: simon
GPG key ID: 347FF8699CDA0776
1 changed files with 2 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

3
machines/renge/services/coturn.nix
View file

@ -72,7 +72,8 @@ in
systemd.services.coturn = { systemd.services.coturn = {
after = [ "acme-finished-${fqdn}.target" ]; after = [ "acme-finished-${fqdn}.target" ];
serviceConfig = { serviceConfig = {
ExecStartPre = lib.singleton "!${pkgs.writeShellScript "coturn-setup-tls" '' RuntimeDirectory = "turnserver";
ExecStartPre = lib.singleton "+${pkgs.writeShellScript "coturn-setup-tls" ''
cp ${config.security.acme.certs."${fqdn}".directory}/{fullchain,key}.pem /run/turnserver/ cp ${config.security.acme.certs."${fqdn}".directory}/{fullchain,key}.pem /run/turnserver/
chgrp turnserver /run/turnserver/{fullchain,key}.pem chgrp turnserver /run/turnserver/{fullchain,key}.pem
''}"; ''}";