From 6c8e827c239577ab00b2a29db49afb9aac70dd66 Mon Sep 17 00:00:00 2001 From: Kerstin Humm Date: Sun, 31 Oct 2021 13:37:00 +0100 Subject: [PATCH 1/3] nixos/gollum: Specify systemd WorkingDirectory --- nixos/modules/services/misc/gollum.nix | 1 + 1 file changed, 1 insertion(+) diff --git a/nixos/modules/services/misc/gollum.nix b/nixos/modules/services/misc/gollum.nix index 4053afa69be5..cad73a871ba6 100644 --- a/nixos/modules/services/misc/gollum.nix +++ b/nixos/modules/services/misc/gollum.nix @@ -100,6 +100,7 @@ in serviceConfig = { User = config.users.users.gollum.name; Group = config.users.groups.gollum.name; + WorkingDirectory = cfg.stateDir; ExecStart = '' ${pkgs.gollum}/bin/gollum \ --port ${toString cfg.port} \ From 8d3b180052a7dc8fcab93a8402154816f2c8a51f Mon Sep 17 00:00:00 2001 From: Kerstin Humm Date: Sun, 31 Oct 2021 13:39:18 +0100 Subject: [PATCH 2/3] nixos/radicale: specify systemd WorkingDirectory --- nixos/modules/services/networking/radicale.nix | 1 + 1 file changed, 1 insertion(+) diff --git a/nixos/modules/services/networking/radicale.nix b/nixos/modules/services/networking/radicale.nix index c121008d5294..c6c40777ed7c 100644 --- a/nixos/modules/services/networking/radicale.nix +++ b/nixos/modules/services/networking/radicale.nix @@ -195,6 +195,7 @@ in { SystemCallArchitectures = "native"; SystemCallFilter = [ "@system-service" "~@privileged" "~@resources" ]; UMask = "0027"; + WorkingDirectory = "/var/lib/radicale"; }; }; }; From 62ab77a322514cfcd24d7cfd41c7e00c9a20f0b8 Mon Sep 17 00:00:00 2001 From: Kerstin Humm Date: Sun, 31 Oct 2021 13:39:46 +0100 Subject: [PATCH 3/3] nixos/borgbackup: specify systemd WorkingDirectory --- nixos/modules/services/backup/borgbackup.nix | 1 + 1 file changed, 1 insertion(+) diff --git a/nixos/modules/services/backup/borgbackup.nix b/nixos/modules/services/backup/borgbackup.nix index 220c571b927e..b2147c1bbfc9 100644 --- a/nixos/modules/services/backup/borgbackup.nix +++ b/nixos/modules/services/backup/borgbackup.nix @@ -152,6 +152,7 @@ let serviceConfig = { # The service's only task is to ensure that the specified path exists Type = "oneshot"; + WorkingDirectory = cfg.path; }; wantedBy = [ "multi-user.target" ]; };