feat(tmpfiles): defer per-service file permissions to reduce boot time

2026-02-12 18:48:29 -05:00
parent 84cbe82cb0
commit 82add97a80
19 changed files with 139 additions and 53 deletions
--- a/services/postgresql.nix
+++ b/services/postgresql.nix
@@ -10,6 +10,9 @@
    (lib.serviceMountWithZpool "postgresql" service_configs.zpool_ssds [
      config.services.postgresql.dataDir
    ])
+    (lib.serviceFilePerms "postgresql" [
+      "Z ${config.services.postgresql.dataDir} 0700 postgres postgres"
+    ])
  ];

  services.postgresql = {
@@ -18,8 +21,4 @@
    dataDir = service_configs.postgres.dataDir;
  };

-  systemd.tmpfiles.rules = [
-    # postgresql requires 0700
-    "Z ${config.services.postgresql.dataDir} 0700 postgresql postgresql"
-  ];
 }