cleanup: persist/private: simplify
This commit is contained in:
@@ -111,10 +111,13 @@ lib.mkIf config.sane.persist.enable
|
|||||||
};
|
};
|
||||||
|
|
||||||
# let sane.fs know about the mount
|
# let sane.fs know about the mount
|
||||||
sane.fs."${origin}".mount.depends = [
|
sane.fs."${origin}" = {
|
||||||
config.sane.fs."${backing}".unit
|
mount.depends = [
|
||||||
config.sane.fs."/run/gocryptfs".unit
|
config.sane.fs."${backing}".unit
|
||||||
];
|
config.sane.fs."/run/gocryptfs".unit
|
||||||
|
];
|
||||||
|
wantedBy = [ "local-fs.target" ];
|
||||||
|
};
|
||||||
# it also needs to know that the underlying device is an ordinary folder
|
# it also needs to know that the underlying device is an ordinary folder
|
||||||
sane.fs."${backing}".dir.acl.user = config.sane.defaultUser;
|
sane.fs."${backing}".dir.acl.user = config.sane.defaultUser;
|
||||||
sane.fs."/run/gocryptfs".dir.acl = {
|
sane.fs."/run/gocryptfs".dir.acl = {
|
||||||
@@ -122,13 +125,6 @@ lib.mkIf config.sane.persist.enable
|
|||||||
mode = "0700";
|
mode = "0700";
|
||||||
};
|
};
|
||||||
|
|
||||||
# in order for non-systemd `mount` to work, the mount point has to already be created, so make that a default target
|
|
||||||
systemd.units = let
|
|
||||||
originUnit = config.sane.fs."${origin}".generated.unit;
|
|
||||||
in {
|
|
||||||
"${originUnit}".wantedBy = [ "local-fs.target" ];
|
|
||||||
};
|
|
||||||
|
|
||||||
system.fsPackages = [ gocryptfs-private ];
|
system.fsPackages = [ gocryptfs-private ];
|
||||||
|
|
||||||
sane.user.services.gocryptfs-private = {
|
sane.user.services.gocryptfs-private = {
|
||||||
|
Reference in New Issue
Block a user