victor/nixos
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

isengard: separated nextcloud data

Browse Source
This commit is contained in:
Victor Ișan 2026-05-10 15:09:10 +02:00
parent b2ecbaee14
commit 296f55f905
2 changed files with 8 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
hosts/isengard.nix
View File

@ -48,6 +48,7 @@
virtualisation.oci-containers.backend = "podman"; virtualisation.oci-containers.backend = "podman";
systemd.tmpfiles.rules = [ systemd.tmpfiles.rules = [
"d /srv/containers 0775 root admin" "d /srv/containers 0775 root admin"
"d /srv/data 0775 root admin"
]; ];
# Security # Security

7
modules/containers/nextcloud.nix
View File

@ -2,11 +2,13 @@
let let
workDir = "/srv/containers/nextcloud"; workDir = "/srv/containers/nextcloud";
dataDir = "/srv/data/nextcloud";
in in
{ {
systemd.tmpfiles.rules = [ systemd.tmpfiles.rules = [
"d ${workDir}/html 2700 33 33" "d ${workDir}/html 2700 33 33"
"d ${workDir}/db 2700 999 999" "d ${workDir}/db 2700 999 999"
"d ${dataDir} 2700 victor admin"
]; ];
virtualisation.oci-containers.containers = { virtualisation.oci-containers.containers = {
@ -20,6 +22,7 @@ in
volumes = [ volumes = [
"${workDir}/html:/var/www/html" "${workDir}/html:/var/www/html"
"${dataDir}:/var/www/html/data"
]; ];
environmentFiles = [ environmentFiles = [
@ -30,6 +33,10 @@ in
"nextcloud-db" "nextcloud-db"
"nextcloud-redis" "nextcloud-redis"
]; ];
extraOptions = [
"--group-add=10000" # admin group
];
}; };
nextcloud-db = { nextcloud-db = {