change systemd config

2025-01-12 16:01:27 -06:00
parent 112224eb75
commit 45a4997693
2 changed files with 19 additions and 17 deletions
@@ -91,8 +91,8 @@ in {
      }
    ];

-    services.jellyseerr = {
-      enable = cfg.enable;
+    util-nixarr.services.jellyseerr = {
+      enable = true;
      package = cfg.package;
      openFirewall = cfg.openFirewall;
      port = cfg.port;
@@ -56,24 +56,26 @@ in {
      serviceConfig = {
        Type = "exec";
        StateDirectory = "jellyseerr";
+        DynamicUser = false;
        User = cfg.user;
+        Group = cfg.group;
        ExecStart = lib.getExe cfg.package;
        Restart = "on-failure";
-        ProtectHome = true;
-        ProtectSystem = "strict";
-        PrivateTmp = true;
-        PrivateDevices = true;
-        ProtectHostname = true;
-        ProtectClock = true;
-        ProtectKernelTunables = true;
-        ProtectKernelModules = true;
-        ProtectKernelLogs = true;
-        ProtectControlGroups = true;
-        NoNewPrivileges = true;
-        RestrictRealtime = true;
-        RestrictSUIDSGID = true;
-        RemoveIPC = true;
-        PrivateMounts = true;
+        # ProtectHome = true;
+        # ProtectSystem = "strict";
+        # PrivateTmp = true;
+        # PrivateDevices = true;
+        # ProtectHostname = true;
+        # ProtectClock = true;
+        # ProtectKernelTunables = true;
+        # ProtectKernelModules = true;
+        # ProtectKernelLogs = true;
+        # ProtectControlGroups = true;
+        # NoNewPrivileges = true;
+        # RestrictRealtime = true;
+        # RestrictSUIDSGID = true;
+        # RemoveIPC = true;
+        # PrivateMounts = true;
      };
    };