...flakes

1 files changed, 8 insertions, 3 deletions

diff --git a/hosts/vidhar/network/pppoe/default.nix b/hosts/vidhar/network/pppoe/default.nix
index 62a0eec8..2ada4577 100644
--- a/hosts/vidhar/network/pppoe/default.nix
+++ b/hosts/vidhar/network/pppoe/default.nix
@@ -53,6 +53,8 @@ in {
         RestartMaxDelaySec = "5s";
         RestartSteps = 4;
         StartLimitBurst = 10;
+
+        ProtectHome = lib.mkForce "tmpfs";
       };
 
       bindsTo = [ "sys-subsystem-net-devices-pppoe.device" ];
@@ -80,9 +82,12 @@ in {
         debug
         +ipv6
       '';
-      "ppp/pap-secrets".text = ''
-        DSL0004874856014@s93.bbi-o2.de * @/run/credentials/pppd-o2.service/password *
-      '';
+      "ppp/pap-secrets" = {
+        mode = "0400";
+        text = ''
+          DSL0004874856014@s93.bbi-o2.de * @/run/credentials/pppd-o2.service/password *
+        '';
+      };
       "ppp/ip-pre-up".source = pkgs.resholve.writeScript "ip-pre-up" {
         interpreter = pkgs.runtimeShell;
         inputs = [ pkgs.iproute2 pkgs.ethtool ];