All modules: ProtectSystem = strict

Add ReadWritePaths in all modules, except lnd which has ProtectSystem =
full.
This commit is contained in:
nixbitcoin 2020-05-05 17:15:16 +02:00
parent adc71b892e
commit a040e52854
No known key found for this signature in database
GPG key ID: DD11F9AD5308B3BA
10 changed files with 11 additions and 1 deletions

View file

@ -224,6 +224,7 @@ in {
ExecStart = "${pkgs.nix-bitcoin.elementsd}/bin/elementsd ${cmdlineOptions}";
PIDFile = "${pidFile}";
Restart = "on-failure";
ReadWritePaths = "${cfg.dataDir}";
} // (if cfg.enforceTor
then nix-bitcoin-services.allowTor
else nix-bitcoin-services.allowAnyIP