public
/
lemmy-container
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Make things not readonly

This commit is contained in:
niten 2024-01-25 09:57:04 -08:00
parent 5aa22d2a8f
commit 13ea009fec
1 changed files with 8 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

13
lemmy-container.nix
View File

@ -67,14 +67,17 @@ in {
hostPort = cfg.port;
containerPort = 80;
}];
## Does ephemeral mean read-only?
# ephemeral = true;
ephemeral = true;
bindMounts = {
"/var/lib/postgres/data" = {
hostPath = "${cfg.state-directory}/postgres";
isReadOnly = false;
};
"/var/lib/private" = { hostPath = "${cfg.state-directory}/pictrs"; };
"${cfg.admin-password-file}" = {
"/var/lib/private" = {
hostPath = "${cfg.state-directory}/pictrs";
isReadOnly = false;
};
"/run/lemmy-container/admin.passwd" = {
isReadOnly = true;
hostPath = cfg.admin-password-file;
};
@ -90,7 +93,7 @@ in {
lemmy = {
enable = true;
database.createLocally = true;
adminPasswordFile = cfg.admin-password-file;
adminPasswordFile = "/run/lemmy-container/admin.passwd";
nginx.enable = true;
server.package = cfg.server-package;
settings = {