From 16f28933e7f6b980a5a3c896aeb02f435db63a84 Mon Sep 17 00:00:00 2001
From: Sandro Jäckel <sandro.jaeckel@gmail.com>
Date: Fri, 3 Jun 2022 03:07:45 +0200
Subject: nixos/asf: set restrictive home permissions

---
 nixos/modules/services/games/asf.nix | 1 +
 1 file changed, 1 insertion(+)

(limited to 'nixos/modules/services/games/asf.nix')

diff --git a/nixos/modules/services/games/asf.nix b/nixos/modules/services/games/asf.nix
index 32294d23e90..8e96ea29c34 100644
--- a/nixos/modules/services/games/asf.nix
+++ b/nixos/modules/services/games/asf.nix
@@ -163,6 +163,7 @@ respectively `0` because NixOS takes care of updating everything.
     users = {
       users.asf = {
         home = cfg.dataDir;
+        homeMode = "700";
         isSystemUser = true;
         group = "asf";
         description = "Archis-Steam-Farm service user";
-- 
cgit 1.4.1