mirror of
https://github.com/9001/copyparty.git
synced 2025-08-18 09:22:31 -06:00
fixup! added ability to specify user and group.
This commit is contained in:
parent
a54e950ecc
commit
91a3059378
|
@ -96,11 +96,11 @@ in {
|
||||||
description = "Number of files to allow copyparty to open.";
|
description = "Number of files to allow copyparty to open.";
|
||||||
};
|
};
|
||||||
|
|
||||||
seperateHist = mkOption {
|
separateHist = mkOption {
|
||||||
default = true;
|
default = true;
|
||||||
type = types.bool;
|
type = types.bool;
|
||||||
description = ''
|
description = ''
|
||||||
Whether to have cache directories seperate from their associated volumes.
|
Whether to have cache directories separate from their associated volumes.
|
||||||
|
|
||||||
Disabling this can be useful if you want the served volume to be portable between machines, or otherwise self-contained.
|
Disabling this can be useful if you want the served volume to be portable between machines, or otherwise self-contained.
|
||||||
'';
|
'';
|
||||||
|
@ -262,7 +262,7 @@ in {
|
||||||
Type = "simple";
|
Type = "simple";
|
||||||
ExecStart = ''
|
ExecStart = ''
|
||||||
${getExe cfg.package} -c ${runtimeConfigPath} \
|
${getExe cfg.package} -c ${runtimeConfigPath} \
|
||||||
${optionalString (cfg.seperateHist) "--hist ${externalCacheDir}"}
|
${optionalString (cfg.separateHist) "--hist ${externalCacheDir}"}
|
||||||
'';
|
'';
|
||||||
|
|
||||||
# Hardening options
|
# Hardening options
|
||||||
|
@ -272,8 +272,8 @@ in {
|
||||||
RuntimeDirectoryMode = "0700";
|
RuntimeDirectoryMode = "0700";
|
||||||
StateDirectory = ["copyparty"];
|
StateDirectory = ["copyparty"];
|
||||||
StateDirectoryMode = "0700";
|
StateDirectoryMode = "0700";
|
||||||
CacheDirectory = lib.mkIf cfg.seperateHist ["copyparty"];
|
CacheDirectory = lib.mkIf cfg.separateHist ["copyparty"];
|
||||||
CacheDirectoryMode = lib.mkIf cfg.seperateHist "0700";
|
CacheDirectoryMode = lib.mkIf cfg.separateHist "0700";
|
||||||
WorkingDirectory = externalStateDir;
|
WorkingDirectory = externalStateDir;
|
||||||
BindReadOnlyPaths =
|
BindReadOnlyPaths =
|
||||||
[
|
[
|
||||||
|
@ -286,7 +286,7 @@ in {
|
||||||
++ (mapAttrsToList (k: v: "-${v.passwordFile}") cfg.accounts);
|
++ (mapAttrsToList (k: v: "-${v.passwordFile}") cfg.accounts);
|
||||||
BindPaths =
|
BindPaths =
|
||||||
(
|
(
|
||||||
if cfg.seperateHist
|
if cfg.separateHist
|
||||||
then [externalCacheDir]
|
then [externalCacheDir]
|
||||||
else []
|
else []
|
||||||
)
|
)
|
||||||
|
@ -321,7 +321,7 @@ in {
|
||||||
users.users.copyparty = lib.mkIf (cfg.user == "copyparty" && cfg.group == "copyparty") {
|
users.users.copyparty = lib.mkIf (cfg.user == "copyparty" && cfg.group == "copyparty") {
|
||||||
description = "Service user for copyparty";
|
description = "Service user for copyparty";
|
||||||
group = "copyparty";
|
group = "copyparty";
|
||||||
home = lib.mkIf externalStateDir;
|
home = lib.mkIf cfg.separateHist externalStateDir;
|
||||||
isSystemUser = true;
|
isSystemUser = true;
|
||||||
};
|
};
|
||||||
};
|
};
|
||||||
|
|
Loading…
Reference in a new issue