summaryrefslogtreecommitdiff
path: root/hosts/poweredge/ddns-updater.nix
diff options
context:
space:
mode:
Diffstat (limited to 'hosts/poweredge/ddns-updater.nix')
-rw-r--r--hosts/poweredge/ddns-updater.nix7
1 files changed, 6 insertions, 1 deletions
diff --git a/hosts/poweredge/ddns-updater.nix b/hosts/poweredge/ddns-updater.nix
index 30f6e05..103c23b 100644
--- a/hosts/poweredge/ddns-updater.nix
+++ b/hosts/poweredge/ddns-updater.nix
@@ -1,4 +1,4 @@
-{ config, ... }: {
+{ config, lib, ... }: {
# Password file for mail application password
sops.secrets.ddns-updater-config.sopsFile = ./resources/secrets/ddns-updater-config.yaml;
@@ -11,4 +11,9 @@
PERIOD = "5m";
};
};
+
+ # FIXME Required root permissions to open secret
+ systemd.services.ddns-updater = {
+ serviceConfig.DynamicUser = lib.mkForce false;
+ };
}