SebastianStork/nixos-config
1
0
Fork 0
mirror of https://github.com/SebastianStork/nixos-config.git synced 2026-01-21 16:21:34 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions

Fix secret permissions in nextcloud container

Browse source
This commit is contained in:
SebastianStork 2024-08-29 23:10:22 +02:00
parent 2b03c5232e
commit f0b4b627cc
3 changed files with 3 additions and 4 deletions
Download patch file Download diff file Expand all files Collapse all files

3
hosts/stratus/containers/nextcloud/default.nix
View file

@ -10,8 +10,7 @@
autoStart = true; autoStart = true;
ephemeral = true; ephemeral = true;
bindMounts = { bindMounts = {
"/run/secrets/nextcloud/admin-password" = { }; "/run/secrets/nextcloud".isReadOnly = false;
"/run/secrets/nextcloud/gmail-password" = { };
"/run/secrets/tailscale-auth-key" = { }; "/run/secrets/tailscale-auth-key" = { };
"/data/nextcloud".isReadOnly = false; "/data/nextcloud".isReadOnly = false;
"/data/postgresql".isReadOnly = false; "/data/postgresql".isReadOnly = false;

2
hosts/stratus/containers/nextcloud/email-server.nix
View file

@ -1,5 +1,5 @@
{ {
systemd.tmpfiles.rules = [ "d /run/secrets/nextcloud/gmail-password 400 nextcloud nextcloud -" ]; systemd.tmpfiles.rules = [ "z /run/secrets/nextcloud/gmail-password 400 nextcloud nextcloud -" ];
services.nextcloud.settings = { services.nextcloud.settings = {
mail_smtpmode = "sendmail"; mail_smtpmode = "sendmail";

2
hosts/stratus/containers/nextcloud/nextcloud.nix
View file

@ -4,7 +4,7 @@
... ...
}: }:
{ {
systemd.tmpfiles.rules = [ "d /run/secrets/nextcloud/admin-password 400 nextcloud nextcloud -" ]; systemd.tmpfiles.rules = [ "z /run/secrets/nextcloud/admin-password 400 nextcloud nextcloud -" ];
services.postgresql.dataDir = "/data/postgresql"; services.postgresql.dataDir = "/data/postgresql";