Switch from ensure-directories to tmpfiles

This commit is contained in:
niten 2021-12-08 11:00:07 -08:00
parent 180b1783c9
commit 4bca46cd4e
3 changed files with 8 additions and 21 deletions

View File

@ -19,6 +19,8 @@ let
}; };
}; };
config-dir = dirOf cfg.config-file;
concatMapAttrs = f: attrs: concatMapAttrs = f: attrs:
foldr (a: b: a // b) {} (mapAttrs f attrs); foldr (a: b: a // b) {} (mapAttrs f attrs);
@ -185,14 +187,7 @@ in {
}; };
}) cfg.sites; }) cfg.sites;
system = let system = {
config-dir = dirOf cfg.config-file;
in {
ensure-directories.${config-dir} = {
user = cfg.user;
perms = "0700";
};
services.ejabberd-config-generator = let services.ejabberd-config-generator = let
config-generator = config-generator =
enter-secrets config-file-template cfg.secret-files cfg.config-file; enter-secrets config-file-template cfg.secret-files cfg.config-file;
@ -212,7 +207,7 @@ in {
systemd = { systemd = {
tmpfiles.rules = [ tmpfiles.rules = [
"D '${dirOf cfg.config-file}' 0550 ${cfg.user} ${cfg.group} - -" "d '${config-dir}' 0700 ${cfg.user} ${cfg.group} - -'"
]; ];
services = { services = {

View File

@ -373,15 +373,11 @@ in {
# }; # };
}; };
fudo.system = { systemd.tmpfiles.rules = [
ensure-directories = { "d ${state-directory} 0740 ${cfg.user} ${cfg.group} - -"
"${state-directory}" = { ];
user = cfg.user;
group = cfg.group;
perms = "0740";
};
};
fudo.system = {
services = if master-server then { services = if master-server then {
heimdal-kdc = let heimdal-kdc = let

View File

@ -387,10 +387,6 @@ in {
timerConfig = { OnCalendar = opts.onCalendar; }; timerConfig = { OnCalendar = opts.onCalendar; };
}) (filterAttrs (name: opts: opts.onCalendar != null) cfg.services); }) (filterAttrs (name: opts: opts.onCalendar != null) cfg.services);
systemd.tmpfiles.rules = mapAttrsToList
(path: opts: "d ${path} ${opts.perms} ${opts.user} ${opts.group} - -")
cfg.ensure-directories;
systemd.targets.fudo-init = { wantedBy = [ "multi-user.target" ]; }; systemd.targets.fudo-init = { wantedBy = [ "multi-user.target" ]; };
systemd.services = mapAttrs (name: opts: { systemd.services = mapAttrs (name: opts: {