nixos/chrony: fix misplaced ConditionCapability= directive

Signed-off-by: Austin Seipp <aseipp@pobox.com>
palfrey · Dec 3, 2018 · 4594b18 · 4594b18
1 parent 808f058
commit 4594b18
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/nixos/modules/services/networking/chrony.nix b/nixos/modules/services/networking/chrony.nix
@@ -113,6 +113,7 @@ in
           chown chrony:chrony ${stateDir} ${keyFile}
         '';
 
+        unitConfig.ConditionCapability = "CAP_SYS_TIME";
         serviceConfig =
           { Type = "forking";
             ExecStart = "${pkgs.chrony}/bin/chronyd ${chronyFlags}";
@@ -121,8 +122,8 @@ in
             ProtectSystem = "full";
             PrivateTmp = "yes";
 
-            ConditionCapability = "CAP_SYS_TIME";
           };
+
       };
   };
 }