nixos/prometheus: allow state access for service only
There is no reason for Prometheus state files to be world-readable.
This commit is contained in:
parent
44b5c74960
commit
447b1cf03d
@ -945,6 +945,7 @@ in {
|
||||
RuntimeDirectoryMode = "0700";
|
||||
WorkingDirectory = workingDir;
|
||||
StateDirectory = cfg.stateDir;
|
||||
StateDirectoryMode = "0700";
|
||||
};
|
||||
};
|
||||
};
|
||||
|
Loading…
Reference in New Issue
Block a user