From f5eaf285580caf7e4e962b3d1e2fea7a52c3fd7d Mon Sep 17 00:00:00 2001
From: Norbert Melzer <timmelzer@gmail.com>
Date: Wed, 1 Jan 2025 22:15:40 +0100
Subject: [PATCH] replace SYS_ADM capa by proper notify access

Even though "all" feels rather broad, "main" and "exec" do not work.
---
 nixos/configurations/mimas/gitea.nix | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/nixos/configurations/mimas/gitea.nix b/nixos/configurations/mimas/gitea.nix
index 82ef09a7..ba9368a8 100644
--- a/nixos/configurations/mimas/gitea.nix
+++ b/nixos/configurations/mimas/gitea.nix
@@ -51,12 +51,12 @@ in {
         NU_LOG_LEVEL = "DEBUG";
       };
       serviceConfig = {
-        AmbientCapabilities = "CAP_SYS_ADMIN";
         CPUAccounting = true;
         CPUQuota = "200%";
         CPUWeight = "idle";
         ExecStart = "${lib.getExe gitea-gc-script} /var/lib/gitea/repositories";
         RemainAfterExit = true;
+        NotifyAccess = "all";
         Type = "notify";
         User = config.services.gitea.user;
       };
-- 
2.51.2