From 90c54c34fbf94743140d7f68a2da4ab48d235d1e Mon Sep 17 00:00:00 2001
From: Ed Kimber <ekimber@protonmail.com>
Date: Wed, 7 Aug 2024 09:51:51 +0100
Subject: [PATCH] Fix nethermind module (#540)

* missing backslash

* Turn off MemoryDenyWriteExecute for nethermind
---
 modules/nethermind/default.nix | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/modules/nethermind/default.nix b/modules/nethermind/default.nix
index 7a2fc6d8..a6d68738 100644
--- a/modules/nethermind/default.nix
+++ b/modules/nethermind/default.nix
@@ -114,7 +114,7 @@ in {
 
               filteredArgs = builtins.filter isNormalArg args;
             in ''
-              ${datadir}
+              ${datadir} \
               ${jwtSecret} \
               ${concatStringsSep " \\\n" filteredArgs} \
               ${lib.escapeShellArgs cfg.extraArgs}
@@ -132,12 +132,13 @@ in {
 
               # create service config by merging with the base config
               serviceConfig = mkMerge [
-                baseServiceConfig
                 {
                   User = serviceName;
                   StateDirectory = serviceName;
+                  MemoryDenyWriteExecute = false; # setting this option is incompatible with JIT
                   ExecStart = "${cfg.package}/bin/nethermind ${scriptArgs}";
                 }
+                baseServiceConfig
                 (mkIf (cfg.args.modules.JsonRpc.JwtSecretFile != null) {
                   LoadCredential = ["jwtsecret:${cfg.args.modules.JsonRpc.JwtSecretFile}"];
                 })