feat(tmpfiles): defer per-service file permissions to reduce boot time

2026-02-12 18:48:29 -05:00
parent 84cbe82cb0
commit 82add97a80
19 changed files with 139 additions and 53 deletions
--- a/services/ntfy.nix
+++ b/services/ntfy.nix
@@ -9,6 +9,9 @@
    (lib.serviceMountWithZpool "ntfy-sh" service_configs.zpool_ssds [
      "/var/lib/private/ntfy-sh"
    ])
+    (lib.serviceFilePerms "ntfy-sh" [
+      "Z /var/lib/private/ntfy-sh 0700 ${config.services.ntfy-sh.user} ${config.services.ntfy-sh.group}"
+    ])
  ];

  services.ntfy-sh = {
@@ -28,7 +31,4 @@
    reverse_proxy :${builtins.toString service_configs.ports.ntfy}
  '';

-  systemd.tmpfiles.rules = [
-    "Z /var/lib/private/ntfy-sh 0700 ${config.services.ntfy-sh.user} ${config.services.ntfy-sh.group}"
-  ];
 }