nix-configs

commit 60a0e8571f7c5748848516a7bd11f44183df81ba
parent 1b0302dbe5e17f4ec432f1babe189fb8f255eb8c
Author: breadcat <breadcat@users.noreply.github.com>
Date:   Thu,  5 Feb 2026 15:13:46 +0000

Turns out you don't need to run it as root after all

Diffstat:
M
common/stromboli.nix
 | 
3
+++

1 file changed, 3 insertions(+), 0 deletions(-)
diff --git a/common/stromboli.nix b/common/stromboli.nix
@@ -9,10 +9,13 @@
 
     serviceConfig = {
       Type = "simple";
+      User = "${username}";
       WorkingDirectory = "/home/${username}/vault/src/stromboli";
       ExecStart = "${pkgs.go}/bin/go run . -d /tank/media/videos/ -p 80";
       Restart = "on-failure";
       RestartSec = "5s";
+      AmbientCapabilities = "cap_net_bind_service";
+      CapabilityBoundingSet = "cap_net_bind_service";
     };
 
     environment = {