public
/
lemmy-container
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Make things not readonly

This commit is contained in:
niten 2024-01-25 09:57:04 -08:00
parent 5aa22d2a8f
commit 13ea009fec
1 changed files with 8 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

13
lemmy-container.nix
View File

@ -67,14 +67,17 @@ in {
hostPort = cfg.port; hostPort = cfg.port;
containerPort = 80; containerPort = 80;
}]; }];
## Does ephemeral mean read-only? ephemeral = true;
# ephemeral = true;
bindMounts = { bindMounts = {
"/var/lib/postgres/data" = { "/var/lib/postgres/data" = {
hostPath = "${cfg.state-directory}/postgres"; hostPath = "${cfg.state-directory}/postgres";
isReadOnly = false;
}; };
"/var/lib/private" = { hostPath = "${cfg.state-directory}/pictrs"; }; "/var/lib/private" = {
"${cfg.admin-password-file}" = { hostPath = "${cfg.state-directory}/pictrs";
isReadOnly = false;
};
"/run/lemmy-container/admin.passwd" = {
isReadOnly = true; isReadOnly = true;
hostPath = cfg.admin-password-file; hostPath = cfg.admin-password-file;
}; };
@ -90,7 +93,7 @@ in {
lemmy = { lemmy = {
enable = true; enable = true;
database.createLocally = true; database.createLocally = true;
adminPasswordFile = cfg.admin-password-file; adminPasswordFile = "/run/lemmy-container/admin.passwd";
nginx.enable = true; nginx.enable = true;
server.package = cfg.server-package; server.package = cfg.server-package;
settings = { settings = {