Henry-Hiles/nixos
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Change ec modules

Browse source
This commit is contained in:
Henry Hiles 2025-04-18 13:10:50 -04:00
parent c160964c18
commit 1d46cb69fc
Signed by: Henry-Hiles
SSH key fingerprint: SHA256:VKQUdS31Q90KvX7EkKMHMBpUspcmItAh86a+v7PGiIs
4 changed files with 42 additions and 35 deletions
Download patch file Download diff file Expand all files Collapse all files

6
modules/common/services/lk-jwt-service.nix
View file

@ -20,10 +20,10 @@ in {
'';
};
keyFile = lib.mkOption {
environmentFile = lib.mkOption {
type = lib.types.path;
description = ''
Path to a file showing LiveKit keys, where you must declare some of: `LIVEKIT_KEY`, `LIVEKIT_SECRET`, `LIVEKIT_KEY_FROM_FILE`, `LIVEKIT_SECRET_FROM_FILE`, and/or `LIVEKIT_KEY_FILE`.
Path to a file of environment variables, where you must declare some of: `LIVEKIT_KEY`, `LIVEKIT_SECRET`, `LIVEKIT_KEY_FROM_FILE`, `LIVEKIT_SECRET_FROM_FILE`, and/or `LIVEKIT_KEY_FILE`.
For more information, see <https://github.com/element-hq/lk-jwt-service#configuration>.
'';
};
@ -46,7 +46,7 @@ in {
environment.LIVEKIT_URL = cfg.livekit.url;
serviceConfig = {
EnvironmentFile = cfg.livekit.keyFile;
EnvironmentFile = cfg.livekit.environmentFile;
DynamicUser = true;
LockPersonality = true;
MemoryDenyWriteExecute = true;