polen/prixdugaz
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

better prouct

Browse source
This commit is contained in:
Polen 2026-04-02 14:11:59 -04:00
parent 60aa3ad422
commit ecab4d550c
6 changed files with 969 additions and 229 deletions
Download patch file Download diff file Expand all files Collapse all files

11
nixos-module.nix
View file

@ -14,6 +14,12 @@ in
description = "Port the Essence web server listens on.";
};
dataDir = lib.mkOption {
type = lib.types.str;
default = "/var/lib/essence";
description = "Directory where the SQLite database is stored.";
};
openFirewall = lib.mkOption {
type = lib.types.bool;
default = false;
@ -36,7 +42,8 @@ in
wants = [ "network-online.target" ];
environment = {
PORT = toString cfg.port;
PORT = toString cfg.port;
ESSENCE_DB = "${cfg.dataDir}/essence.db";
};
serviceConfig = {
@ -45,6 +52,8 @@ in
RestartSec = 5;
DynamicUser = true;
StateDirectory = "essence";
StateDirectoryMode = "0750";
# Hardening
NoNewPrivileges = true;