cleanup: persist/private: simplify
This commit is contained in:
@@ -111,10 +111,13 @@ lib.mkIf config.sane.persist.enable
|
||||
};
|
||||
|
||||
# let sane.fs know about the mount
|
||||
sane.fs."${origin}".mount.depends = [
|
||||
config.sane.fs."${backing}".unit
|
||||
config.sane.fs."/run/gocryptfs".unit
|
||||
];
|
||||
sane.fs."${origin}" = {
|
||||
mount.depends = [
|
||||
config.sane.fs."${backing}".unit
|
||||
config.sane.fs."/run/gocryptfs".unit
|
||||
];
|
||||
wantedBy = [ "local-fs.target" ];
|
||||
};
|
||||
# it also needs to know that the underlying device is an ordinary folder
|
||||
sane.fs."${backing}".dir.acl.user = config.sane.defaultUser;
|
||||
sane.fs."/run/gocryptfs".dir.acl = {
|
||||
@@ -122,13 +125,6 @@ lib.mkIf config.sane.persist.enable
|
||||
mode = "0700";
|
||||
};
|
||||
|
||||
# in order for non-systemd `mount` to work, the mount point has to already be created, so make that a default target
|
||||
systemd.units = let
|
||||
originUnit = config.sane.fs."${origin}".generated.unit;
|
||||
in {
|
||||
"${originUnit}".wantedBy = [ "local-fs.target" ];
|
||||
};
|
||||
|
||||
system.fsPackages = [ gocryptfs-private ];
|
||||
|
||||
sane.user.services.gocryptfs-private = {
|
||||
|
Reference in New Issue
Block a user