Prevent systemd service from generating a config readable by everyone

This commit is contained in:
mirefly42 2025-05-02 15:41:26 +07:00
parent 9cf0a75940
commit d372b033b6
2 changed files with 2 additions and 0 deletions

View file

@ -8,6 +8,7 @@ After=local-fs.target
[Service]
Type=oneshot
Group=yggdrasil
UMask=037
ExecStartPre=/usr/bin/mkdir -p /etc/yggdrasil
ExecStart=/usr/bin/yggdrasil -genconf > /etc/yggdrasil/yggdrasil.conf
ExecStartPost=/usr/bin/chmod -R 0640 /etc/yggdrasil