titaniumtown/server-config
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

refactor(tmpfiles): migrate 12 services to deferred serviceFilePerms

Browse Source
This commit is contained in:
Simon Gardling
2026-02-12 13:51:05 -05:00
parent 9e346a8406
commit fa01077856
12 changed files with 46 additions and 53 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
services/matrix.nix
View File

@@ -9,6 +9,9 @@
(lib.serviceMountWithZpool "continuwuity" service_configs.zpool_ssds [
"/var/lib/private/continuwuity"
])
(lib.serviceFilePerms "continuwuity" [
"Z /var/lib/private/continuwuity 0770 ${config.services.matrix-continuwuity.user} ${config.services.matrix-continuwuity.group}"
])
];
services.matrix-continuwuity = {
@@ -58,10 +61,6 @@
services.caddy.virtualHosts."${service_configs.matrix.domain}:${builtins.toString service_configs.ports.matrix_federation}".extraConfig =
config.services.caddy.virtualHosts."${service_configs.matrix.domain}".extraConfig;
systemd.tmpfiles.rules = [
"Z /var/lib/private/continuwuity 0770 ${config.services.matrix-continuwuity.user} ${config.services.matrix-continuwuity.group}"
];
# for federation
networking.firewall.allowedTCPPorts = [
service_configs.ports.matrix_federation