From f24b33ae5e7fc14b7140c85d1dea92f8205b9e0d Mon Sep 17 00:00:00 2001
From: Gregor Kleen <gkleen@yggdrasil.li>
Date: Tue, 28 Jul 2026 18:50:29 +0200
Subject: ...

---
 hosts/vidhar/network/pppoe/default.nix | 11 ++++++++---
 1 file changed, 8 insertions(+), 3 deletions(-)

(limited to 'hosts/vidhar/network/pppoe')

diff --git a/hosts/vidhar/network/pppoe/default.nix b/hosts/vidhar/network/pppoe/default.nix
index 62a0eec8..2ada4577 100644
--- a/hosts/vidhar/network/pppoe/default.nix
+++ b/hosts/vidhar/network/pppoe/default.nix
@@ -53,6 +53,8 @@ in {
         RestartMaxDelaySec = "5s";
         RestartSteps = 4;
         StartLimitBurst = 10;
+
+        ProtectHome = lib.mkForce "tmpfs";
       };
 
       bindsTo = [ "sys-subsystem-net-devices-pppoe.device" ];
@@ -80,9 +82,12 @@ in {
         debug
         +ipv6
       '';
-      "ppp/pap-secrets".text = ''
-        DSL0004874856014@s93.bbi-o2.de * @/run/credentials/pppd-o2.service/password *
-      '';
+      "ppp/pap-secrets" = {
+        mode = "0400";
+        text = ''
+          DSL0004874856014@s93.bbi-o2.de * @/run/credentials/pppd-o2.service/password *
+        '';
+      };
       "ppp/ip-pre-up".source = pkgs.resholve.writeScript "ip-pre-up" {
         interpreter = pkgs.runtimeShell;
         inputs = [ pkgs.iproute2 pkgs.ethtool ];
-- 
cgit v1.2.3