Use array for args
This commit is contained in:
parent
461e5bdfcf
commit
e07331f052
1 changed files with 7 additions and 7 deletions
10
module.nix
10
module.nix
|
@ -22,8 +22,8 @@ in {
|
||||||
};
|
};
|
||||||
|
|
||||||
args = lib.mkOption {
|
args = lib.mkOption {
|
||||||
type = lib.types.separatedString " ";
|
type = with lib.types; listOf str;
|
||||||
default = "";
|
default = [];
|
||||||
};
|
};
|
||||||
};
|
};
|
||||||
|
|
||||||
|
@ -37,11 +37,11 @@ in {
|
||||||
|
|
||||||
serviceConfig = {
|
serviceConfig = {
|
||||||
LoadCredential = ["matrixoidc-secrets:${cfg.jwtSecretFile}"];
|
LoadCredential = ["matrixoidc-secrets:${cfg.jwtSecretFile}"];
|
||||||
ExecStart = utils.escapeSystemdExecArgs [
|
ExecStart = utils.escapeSystemdExecArgs ([
|
||||||
(lib.getExe cfg.package)
|
(lib.getExe cfg.package)
|
||||||
cfg.args
|
|
||||||
"--jwtSecretFile=/run/credentials/matrixoidc.service/matrixoidc-secrets"
|
"--jwtSecretFile=/run/credentials/matrixoidc.service/matrixoidc-secrets"
|
||||||
];
|
]
|
||||||
|
++ cfg.args);
|
||||||
DynamicUser = true;
|
DynamicUser = true;
|
||||||
LockPersonality = true;
|
LockPersonality = true;
|
||||||
MemoryDenyWriteExecute = true;
|
MemoryDenyWriteExecute = true;
|
||||||
|
|
Loading…
Add table
Add a link
Reference in a new issue