All modules: ProtectSystem = strict

Add ReadWritePaths in all modules, except lnd which has ProtectSystem = full.
2020-05-22 15:47:01 +00:00
parent adc71b892e
commit a040e52854
10 changed files with 11 additions and 1 deletions
@@ -224,6 +224,7 @@ in {
        ExecStart = "${pkgs.nix-bitcoin.elementsd}/bin/elementsd ${cmdlineOptions}";
        PIDFile = "${pidFile}";
        Restart = "on-failure";
+        ReadWritePaths = "${cfg.dataDir}";
      } // (if cfg.enforceTor
          then nix-bitcoin-services.allowTor
          else nix-bitcoin-services.allowAnyIP