amarth/customer-portal
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

too lazy to think of a message, so enjoy this pointless text. Good luck future me...
Some checks failed
Test action / Print hello world (push) Has been cancelled
Details

Browse source
This commit is contained in:
Chris Kruining 2025-10-15 07:35:23 +00:00
parent f51b8532a1
commit 6416143aa3
2 changed files with 0 additions and 13 deletions
Download patch file Download diff file Expand all files Collapse all files

BIN
kaas Executable file
View file

Binary file not shown.

13
nix/modules/customer-portal/flake-module.nix
View file

@ -87,14 +87,6 @@
description = "Amarth cloud's customer portal"; description = "Amarth cloud's customer portal";
serviceConfig = { serviceConfig = {
# ExecStart = utils.escapeSystemdExecArgs [
# (lib.getExe pkgs.bun)
# "--bun"
# "run"
# "${cfg.package}/server/index.mjs"
# "--config"
# (format.generate "config.json" cfg.settings)
# ];
ExecStart = utils.escapeSystemdExecArgs [ ExecStart = utils.escapeSystemdExecArgs [
(lib.getExe cfg.package) (lib.getExe cfg.package)
"--config" "--config"
@ -109,16 +101,11 @@
Group = cfg.group; Group = cfg.group;
UMask = "0077"; UMask = "0077";
# MemoryAccounting = true;
# MemoryHigh = "50M";
# MemoryMax = "100M";
NoNewPrivileges = true; NoNewPrivileges = true;
PrivateDevices = true; PrivateDevices = true;
ProtectKernelTunables = true; ProtectKernelTunables = true;
ProtectKernelModules = true; ProtectKernelModules = true;
ProtectControlGroups = true; ProtectControlGroups = true;
# MemoryDenyWriteExecute = true;
LockPersonality = true; LockPersonality = true;
RestrictAddressFamilies = [ RestrictAddressFamilies = [
"AF_UNIX" "AF_UNIX"