colin/nix-files
1
0
Fork 1
Code Issues Pull Requests Projects Releases Wiki Activity

servo: postgresql: port data to private store

Browse Source
This commit is contained in:
Colin
2024-07-27 16:51:23 +00:00
parent cbe17c03e4
commit e44771f67d
3 changed files with 5 additions and 8 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
hosts/by-name/servo/services/postgres.nix
View File

@@ -6,9 +6,9 @@ let
KiB = n: 1024*n;
in
{
sane.persist.sys.byStore.plaintext = [
# TODO: mode?
{ user = "postgres"; group = "postgres"; path = "/var/lib/postgresql"; method = "bind"; }
sane.persist.sys.byStore.private = [
{ user = "postgres"; group = "postgres"; mode = "0750"; path = "/var/lib/postgresql"; method = "bind"; }
{ user = "postgres"; group = "postgres"; mode = "0750"; path = "/var/backup/postgresql"; method = "bind"; }
];
services.postgresql.enable = true;

1
hosts/by-name/servo/services/transmission/default.nix
View File

@@ -38,6 +38,7 @@ in
sane.persist.sys.byStore.private = [
# TODO: mode? we need this specifically for the stats tracking in .config/
{ user = "transmission"; group = config.users.users.transmission.group; path = "/var/lib/transmission"; method = "bind"; }
{ user = "transmission"; group = config.users.users.transmission.group; path = "/var/backup/torrents"; method = "bind"; }
];
users.users.transmission.extraGroups = [ "media" ];

6
hosts/common/persist.nix
View File

@@ -2,11 +2,7 @@
{
sane.persist.sys.byStore.initrd = [
"/var/log"
];
sane.persist.sys.byStore.plaintext = [
# TODO: these should be private.. somehow
"/var/backup" # for e.g. postgres dumps
"/var/log" #< TODO: this includes e.g. /var/log/nginx, which SHOULD NOT BE PERSISTED in plaintext
];
sane.persist.sys.byStore.ephemeral = [
"/var/lib/systemd/coredump"