nixos/prometheus: allow state access for service only

There is no reason for Prometheus state files to be
world-readable.
This commit is contained in:
Konrad Borowski 2021-06-21 10:16:47 +02:00
parent 44b5c74960
commit 447b1cf03d

View file

@ -945,6 +945,7 @@ in {
RuntimeDirectoryMode = "0700";
WorkingDirectory = workingDir;
StateDirectory = cfg.stateDir;
StateDirectoryMode = "0700";
};
};
};