feat(tmpfiles): defer per-service file permissions to reduce boot time

2026-02-12 18:48:29 -05:00
parent 84cbe82cb0
commit 82add97a80
19 changed files with 139 additions and 53 deletions
--- a/services/immich.nix
+++ b/services/immich.nix
@@ -13,6 +13,9 @@
    (lib.serviceMountWithZpool "immich-machine-learning" service_configs.zpool_ssds [
      config.services.immich.mediaLocation
    ])
+    (lib.serviceFilePerms "immich-server" [
+      "Z ${config.services.immich.mediaLocation} 0770 ${config.services.immich.user} ${config.services.immich.group}"
+    ])
  ];

  services.immich = {
@@ -30,10 +33,6 @@
    reverse_proxy :${builtins.toString config.services.immich.port}
  '';

-  systemd.tmpfiles.rules = [
-    "Z ${config.services.immich.mediaLocation} 0770 ${config.services.immich.user} ${config.services.immich.group}"
-  ];
-
  environment.systemPackages = with pkgs; [
    immich-go
  ];