Move service hardening flags into separate file

2019-04-28 13:15:12 +00:00
parent 66095871c6
commit a089d65d25
11 changed files with 33 additions and 54 deletions
@@ -3,6 +3,7 @@
 with lib;

 let
+  nix-bitcoin-services = import ./nix-bitcoin-services.nix;
  cfg = config.services.nix-bitcoin-webindex;
  indexFile = pkgs.writeText "index.html" ''
    <html>
@@ -80,7 +81,7 @@ in {
        RemainAfterExit="yes";
        Restart = "on-failure";
        RestartSec = "10s";
-      };
+      } // nix-bitcoin-services.defaultHardening;
    };
  };
 }