Disable glitchtip private tmp
I can't auto-clean the temp files when private temp is enabled according to Claude
This commit is contained in:
parent
2d5ccb7a8c
commit
71d1109bf8
1 changed files with 3 additions and 1 deletions
|
|
@ -214,7 +214,6 @@ in
|
|||
MemoryDenyWriteExecute = true;
|
||||
NoNewPrivileges = true;
|
||||
PrivateDevices = true;
|
||||
PrivateTmp = true;
|
||||
PrivateUsers = true;
|
||||
ProcSubset = "pid";
|
||||
ProtectClock = true;
|
||||
|
|
@ -226,6 +225,7 @@ in
|
|||
ProtectKernelTunables = true;
|
||||
ProtectProc = "invisible";
|
||||
ProtectSystem = "strict";
|
||||
ReadWritePaths = "/tmp/glitchtip /mnt/bigdisk/glitchtip/uploads";
|
||||
RemoveIPC = true;
|
||||
RestrictAddressFamilies = [ "AF_INET AF_INET6 AF_UNIX" ];
|
||||
RestrictNamespaces = true;
|
||||
|
|
@ -249,6 +249,7 @@ in
|
|||
'';
|
||||
|
||||
serviceConfig = commonServiceConfig // {
|
||||
PrivateTmp = false;
|
||||
ExecStart = ''
|
||||
${lib.getExe python.pkgs.gunicorn} \
|
||||
--bind=${cfg.listenAddress}:${toString cfg.port} \
|
||||
|
|
@ -272,6 +273,7 @@ in
|
|||
description = "GlitchTip Job Runner";
|
||||
|
||||
serviceConfig = commonServiceConfig // {
|
||||
PrivateTmp = false;
|
||||
ExecStart = ''
|
||||
${lib.getExe python.pkgs.celery} \
|
||||
-A glitchtip worker \
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue