modules(drone-exec-runner): protect runners from killing themselves (really now)

This commit is contained in:
Raito Bezarius 2021-07-26 03:07:59 +02:00
parent 2362a3f38e
commit 2d9da6ab1f

View file

@ -64,7 +64,7 @@ in
systemd.services = mapAttrs' (runnerName: cfg: nameValuePair ("drone-exec-runner-${runnerName}") ({ systemd.services = mapAttrs' (runnerName: cfg: nameValuePair ("drone-exec-runner-${runnerName}") ({
wantedBy = [ "multi-user.target" ]; wantedBy = [ "multi-user.target" ];
inherit restartIfChanged; inherit (cfg) restartIfChanged;
confinement.enable = true; confinement.enable = true;
confinement.packages = cfg.allowedPackages; confinement.packages = cfg.allowedPackages;