about summary refs log tree commit diff
diff options
context:
space:
mode:
authorAlyssa Ross <hi@alyssa.is>2023-06-05 17:27:41 +0000
committerAlyssa Ross <hi@alyssa.is>2023-06-05 20:44:40 +0000
commit00e9d704ce9bce563d7bbd2bf357d631a418ec19 (patch)
treed7440db0122c3a2b8f084cf54d992926b3667b39
parent3a58f35ee8ee6da08014cded4ee53dd8349e33b4 (diff)
downloadnixlib-00e9d704ce9bce563d7bbd2bf357d631a418ec19.tar
nixlib-00e9d704ce9bce563d7bbd2bf357d631a418ec19.tar.gz
nixlib-00e9d704ce9bce563d7bbd2bf357d631a418ec19.tar.bz2
nixlib-00e9d704ce9bce563d7bbd2bf357d631a418ec19.tar.lz
nixlib-00e9d704ce9bce563d7bbd2bf357d631a418ec19.tar.xz
nixlib-00e9d704ce9bce563d7bbd2bf357d631a418ec19.tar.zst
nixlib-00e9d704ce9bce563d7bbd2bf357d631a418ec19.zip
modules/public-inbox: make coderepos accessible
-rw-r--r--modules/server/spectrum/public-inbox/default.nix6
1 files changed, 5 insertions, 1 deletions
diff --git a/modules/server/spectrum/public-inbox/default.nix b/modules/server/spectrum/public-inbox/default.nix
index 183f0fbdd414..2c5aed09631b 100644
--- a/modules/server/spectrum/public-inbox/default.nix
+++ b/modules/server/spectrum/public-inbox/default.nix
@@ -1,4 +1,4 @@
-{ lib, ... }:
+{ config, lib, ... }:
 
 let
   repos = [ "crosvm" "doc" "mktuntap" "nixpkgs" "spectrum" "ucspi-vsock" "www" ];
@@ -15,6 +15,10 @@ in
   services.public-inbox.settings.publicinbox.nntpserver =
     [ "nntps://spectrum-os.org" "nntp://spectrum-os.org" ];
 
+  systemd.services.public-inbox-httpd.serviceConfig.ProtectHome = "tmpfs";
+  systemd.services.public-inbox-httpd.serviceConfig.BindReadOnlyPaths =
+    map (c: c.dir) (lib.attrValues config.services.public-inbox.settings.coderepo);
+
   services.public-inbox.settings.coderepo = lib.genAttrs repos (name: {
     dir = "/home/spectrum/git/${name}.git";
     cgitUrl = "https://spectrum-os.org/git/${name}";