mirrors/copyparty
1
0
Fork 0
mirror of https://github.com/9001/copyparty.git synced 2025-08-17 09:02:15 -06:00
Code Issues Actions Packages Projects Releases Wiki Activity

improved my understanding of what paths copyparty needs to function.

Browse source
This commit is contained in:
Gabe Venberg 2025-04-22 23:33:08 +02:00
parent d94f3a5e66
commit 30dc417188
1 changed files with 12 additions and 8 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

20
contrib/nixos/modules/copyparty.nix
View file

@ -54,8 +54,9 @@ with lib; let
cfg = config.services.copyparty;
configFile = pkgs.writeText "copyparty.conf" configStr;
runtimeConfigPath = "/run/copyparty/copyparty.conf";
externalCacheDir = "/var/cache/copyparty";
externalStateDir = "/var/lib/copyparty";
defaultShareDir = "${externalStateDir}/data";
defaultShareDir = "${externalCacheDir}/data";
in {
options.services.copyparty = {
enable = mkEnableOption "web-based file manager";
@ -243,7 +244,7 @@ in {
environment = {
PYTHONUNBUFFERED = "true";
XDG_CONFIG_HOME = lib.mkIf cfg.seperateHist externalStateDir;
XDG_CONFIG_HOME = externalStateDir;
};
preStart = let
@ -261,7 +262,7 @@ in {
Type = "simple";
ExecStart = ''
${getExe cfg.package} -c ${runtimeConfigPath} \
${optionalString (cfg.seperateHist) "--hist ${externalStateDir}"}
${optionalString (cfg.seperateHist) "--hist ${externalCacheDir}"}
'';
# Hardening options
@ -269,9 +270,11 @@ in {
Group = cfg.group;
RuntimeDirectory = ["copyparty"];
RuntimeDirectoryMode = "0700";
StateDirectory = lib.mkIf cfg.seperateHist ["copyparty"];
StateDirectoryMode = lib.mkIf cfg.seperateHist "0700";
WorkingDirectory = lib.mkIf cfg.seperateHist externalStateDir;
StateDirectory = ["copyparty"];
StateDirectoryMode = "0700";
CacheDirectory = lib.mkIf cfg.seperateHist ["copyparty"];
CacheDirectoryMode = lib.mkIf cfg.seperateHist "0700";
WorkingDirectory = externalStateDir;
BindReadOnlyPaths =
[
"/nix/store"
@ -284,9 +287,10 @@ in {
BindPaths =
(
if cfg.seperateHist
then [externalStateDir]
then [externalCacheDir]
else []
)
++ [externalStateDir]
++ (mapAttrsToList (k: v: v.path) cfg.volumes);
ProtectSystem = "strict";
ProtectHome = "tmpfs";
@ -317,7 +321,7 @@ in {
users.users.copyparty = lib.mkIf (cfg.user == "copyparty" && cfg.group == "copyparty") {
description = "Service user for copyparty";
group = "copyparty";
home = lib.mkIf cfg.seperateHist externalStateDir;
home = lib.mkIf externalStateDir;
isSystemUser = true;
};
};