diff options
Diffstat (limited to 'modules/private/mail/sympa.nix')
-rw-r--r-- | modules/private/mail/sympa.nix | 11 |
1 files changed, 11 insertions, 0 deletions
diff --git a/modules/private/mail/sympa.nix b/modules/private/mail/sympa.nix index f7070e6..5270b69 100644 --- a/modules/private/mail/sympa.nix +++ b/modules/private/mail/sympa.nix | |||
@@ -50,12 +50,22 @@ in | |||
50 | dest = "sympa/scenari/${n}"; permissions = "0400"; group = "sympa"; user = "sympa"; text = v; | 50 | dest = "sympa/scenari/${n}"; permissions = "0400"; group = "sympa"; user = "sympa"; text = v; |
51 | }) sympaConfig.scenari; | 51 | }) sympaConfig.scenari; |
52 | users.users.sympa.extraGroups = [ "keys" ]; | 52 | users.users.sympa.extraGroups = [ "keys" ]; |
53 | systemd.slices.mail-sympa = { | ||
54 | description = "Sympa slice"; | ||
55 | }; | ||
56 | |||
53 | systemd.services.sympa.serviceConfig.SupplementaryGroups = [ "keys" ]; | 57 | systemd.services.sympa.serviceConfig.SupplementaryGroups = [ "keys" ]; |
54 | systemd.services.sympa-archive.serviceConfig.SupplementaryGroups = [ "keys" ]; | 58 | systemd.services.sympa-archive.serviceConfig.SupplementaryGroups = [ "keys" ]; |
55 | systemd.services.sympa-bounce.serviceConfig.SupplementaryGroups = [ "keys" ]; | 59 | systemd.services.sympa-bounce.serviceConfig.SupplementaryGroups = [ "keys" ]; |
56 | systemd.services.sympa-bulk.serviceConfig.SupplementaryGroups = [ "keys" ]; | 60 | systemd.services.sympa-bulk.serviceConfig.SupplementaryGroups = [ "keys" ]; |
57 | systemd.services.sympa-task.serviceConfig.SupplementaryGroups = [ "keys" ]; | 61 | systemd.services.sympa-task.serviceConfig.SupplementaryGroups = [ "keys" ]; |
58 | 62 | ||
63 | systemd.services.sympa.serviceConfig.Slice = "mail-sympa.slice"; | ||
64 | systemd.services.sympa-archive.serviceConfig.Slice = "mail-sympa.slice"; | ||
65 | systemd.services.sympa-bounce.serviceConfig.Slice = "mail-sympa.slice"; | ||
66 | systemd.services.sympa-bulk.serviceConfig.Slice = "mail-sympa.slice"; | ||
67 | systemd.services.sympa-task.serviceConfig.Slice = "mail-sympa.slice"; | ||
68 | |||
59 | # https://github.com/NixOS/nixpkgs/pull/84202 | 69 | # https://github.com/NixOS/nixpkgs/pull/84202 |
60 | systemd.services.sympa.serviceConfig.ProtectKernelModules = lib.mkForce false; | 70 | systemd.services.sympa.serviceConfig.ProtectKernelModules = lib.mkForce false; |
61 | systemd.services.sympa-archive.serviceConfig.ProtectKernelModules = lib.mkForce false; | 71 | systemd.services.sympa-archive.serviceConfig.ProtectKernelModules = lib.mkForce false; |
@@ -72,6 +82,7 @@ in | |||
72 | wantedBy = [ "multi-user.target" ]; | 82 | wantedBy = [ "multi-user.target" ]; |
73 | after = [ "sympa.service" ]; | 83 | after = [ "sympa.service" ]; |
74 | serviceConfig = { | 84 | serviceConfig = { |
85 | Slice = "mail-sympa.slice"; | ||
75 | Type = "forking"; | 86 | Type = "forking"; |
76 | PIDFile = "/run/sympa/wwsympa.pid"; | 87 | PIDFile = "/run/sympa/wwsympa.pid"; |
77 | Restart = "always"; | 88 | Restart = "always"; |