Compare commits
No commits in common. "a0bc8023a62aa84c966e57bc66039137cc9c8408" and "3b4cf54e6201ef58ab76e79a0fc3e44d6ee8521e" have entirely different histories.
a0bc8023a6
...
3b4cf54e62
3 changed files with 0 additions and 54 deletions
|
@ -27,9 +27,6 @@
|
||||||
modules = {
|
modules = {
|
||||||
system = {
|
system = {
|
||||||
impermanence.enable = false;
|
impermanence.enable = false;
|
||||||
services = {
|
|
||||||
nextcloud.enable = true;
|
|
||||||
};
|
|
||||||
hardware = {
|
hardware = {
|
||||||
nvidia.enable = true;
|
nvidia.enable = true;
|
||||||
bluetooth = {
|
bluetooth = {
|
||||||
|
|
|
@ -41,9 +41,6 @@ in {
|
||||||
modules = {
|
modules = {
|
||||||
system = {
|
system = {
|
||||||
impermanence.enable = true;
|
impermanence.enable = true;
|
||||||
services = {
|
|
||||||
nextcloud.enable = true;
|
|
||||||
};
|
|
||||||
programs = {
|
programs = {
|
||||||
editors = {
|
editors = {
|
||||||
emacs.enable = true;
|
emacs.enable = true;
|
||||||
|
|
|
@ -1,48 +0,0 @@
|
||||||
{
|
|
||||||
config,
|
|
||||||
lib,
|
|
||||||
pkgs,
|
|
||||||
...
|
|
||||||
}: let
|
|
||||||
inherit (lib.meta) getExe';
|
|
||||||
inherit (lib.modules) mkIf;
|
|
||||||
cfg = config.modules.system.services.nextcloud;
|
|
||||||
in {
|
|
||||||
options.modules.system.services.nextcloud.enable = lib.mkEnableOption "nextcloud";
|
|
||||||
|
|
||||||
config = {
|
|
||||||
systemd.user.services.nextcloud = mkIf cfg.enable {
|
|
||||||
description = "Nextcloud client service";
|
|
||||||
|
|
||||||
# makes the graphical session start this service when it starts
|
|
||||||
wantedBy = ["graphical-session.target"];
|
|
||||||
# when graphical session restarts or gets stopped, this also gets restarted/stopped.
|
|
||||||
partOf = ["graphical-session.target"];
|
|
||||||
# gets started only after graphical session
|
|
||||||
after = ["graphical-session.target"];
|
|
||||||
|
|
||||||
serviceConfig = {
|
|
||||||
ExecStart = "${getExe' pkgs.nextcloud-client "nextcloud"} --background";
|
|
||||||
Restart = "always";
|
|
||||||
RestartSec = 30;
|
|
||||||
|
|
||||||
# User = "cr";
|
|
||||||
# Group = "cr";
|
|
||||||
|
|
||||||
Keyringmode = "shared";
|
|
||||||
DevicePolicy = "closed";
|
|
||||||
PrivateDevices = true;
|
|
||||||
PrivateTmp = true;
|
|
||||||
ProtectClock = true;
|
|
||||||
ProtectControlGroups = true;
|
|
||||||
ProtectControlGroup = true;
|
|
||||||
ProtectKernelLogs = true;
|
|
||||||
ProtectKernelModules = true;
|
|
||||||
ProtectKernelTunables = true;
|
|
||||||
|
|
||||||
ProtectSystem = "strict";
|
|
||||||
SystemCallFilter = "~@clock @cpu-emulation @debug @obsolete @module @mount @raw-io @reboot @swap @privileged";
|
|
||||||
};
|
|
||||||
};
|
|
||||||
};
|
|
||||||
}
|
|
Loading…
Add table
Add a link
Reference in a new issue