nixos/traefik: replace bash wrapper in ExecStartPre

This commit is contained in:
h7x4
2025-10-31 15:40:20 +09:00
parent 69f6c0a1c5
commit 8f26f8a332

View File

@@ -130,12 +130,9 @@ in
startLimitBurst = 5;
serviceConfig = {
EnvironmentFile = cfg.environmentFiles;
ExecStartPre = lib.optional (cfg.environmentFiles != [ ]) (
pkgs.writeShellScript "pre-start" ''
umask 077
${pkgs.envsubst}/bin/envsubst -i "${staticConfigFile}" > "${finalStaticConfigFile}"
''
);
ExecStartPre = lib.optional (
cfg.environmentFiles != [ ]
) "${pkgs.envsubst}/bin/envsubst -i '${staticConfigFile}' -o '${finalStaticConfigFile}'";
ExecStart = "${cfg.package}/bin/traefik --configfile=${finalStaticConfigFile}";
Type = "simple";
User = "traefik";
@@ -152,6 +149,7 @@ in
ProtectSystem = "full";
ReadWritePaths = [ cfg.dataDir ];
RuntimeDirectory = "traefik";
RuntimeDirectoryMode = "0700";
WorkingDirectory = cfg.dataDir;
};
};