Torjus Håkestad
8e0b97c9e0
Some checks failed
Run nix flake check / flake-check (push) Failing after 4m30s
37 lines
976 B
Nix
37 lines
976 B
Nix
{ pkgs, config, ... }:
|
|
{
|
|
sops.secrets."nats_nkey" = { };
|
|
systemd.services."alerttonotify" = {
|
|
enable = true;
|
|
wants = [ "network-online.target" ];
|
|
after = [
|
|
"network-online.target"
|
|
"sops-nix.service"
|
|
];
|
|
wantedBy = [ "multi-user.target" ];
|
|
restartIfChanged = true;
|
|
|
|
environment = {
|
|
NATS_URL = "nats://nats1.home.2rjus.net:4222";
|
|
NATS_NKEY_FILE = "${config.sops.secrets.nats_nkey.path}";
|
|
};
|
|
|
|
serviceConfig = {
|
|
Type = "exec";
|
|
ExecStart = "${pkgs.alerttonotify}/bin/alerttonotify";
|
|
DynamicUser = "yes";
|
|
CapabilityBoundingSet = "";
|
|
RestrictAddressFamilies = "AF_INET AF_INET6";
|
|
SystemCallArchitectures = "native";
|
|
LockPersonality = "yes";
|
|
MemoryDenyWriteExecute = "yes";
|
|
PrivateDevices = "yes";
|
|
PrivateUsers = "yes";
|
|
ProtectControlGroups = "yes";
|
|
ProtectHome = "yes";
|
|
ProtectHostname = "yes";
|
|
RestrictNamespace = "yes";
|
|
};
|
|
};
|
|
}
|