karaolidis/nix
1
1
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Fix rootless podman permissions

Browse Source 
Signed-off-by: Nikolaos Karaolidis <nick@karaolidis.com>
This commit is contained in:
Nick Karaolidis
2025-03-08 11:59:01 +00:00
parent ad46eb6546
commit bdaac67bf2
5 changed files with 9 additions and 11 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
hosts/eirene/format.nix
View File

@@ -48,6 +48,7 @@
mountOptions = [ mountOptions = [
"compress=zstd:1" "compress=zstd:1"
"noatime" "noatime"
"user_subvol_rm_allowed"
]; ];
in in
{ {

1
hosts/elara/format.nix
View File

@@ -48,6 +48,7 @@
mountOptions = [ mountOptions = [
"compress=zstd:3" "compress=zstd:3"
"noatime" "noatime"
"user_subvol_rm_allowed"
]; ];
in in
{ {

1
hosts/installer/format.nix
View File

@@ -40,6 +40,7 @@
mountOptions = [ mountOptions = [
"compress=zstd:5" "compress=zstd:5"
"noatime" "noatime"
"user_subvol_rm_allowed"
]; ];
in in
{ {

1
hosts/jupiter/format.nix
View File

@@ -51,6 +51,7 @@
mountOptions = [ mountOptions = [
"compress=zstd:1" "compress=zstd:1"
"noatime" "noatime"
"user_subvol_rm_allowed"
]; ];
in in
{ {

16
hosts/jupiter/users/storm/configs/console/podman/authelia/default.nix
View File

@@ -69,7 +69,8 @@ in
"/workdir/users.yaml" "/workdir/users.yaml"
"-i" "-i"
]; ];
userns = "keep-id:uid=1000,gid=1000"; user = "0";
group = "0";
}; };
serviceConfig = { serviceConfig = {
@@ -123,7 +124,6 @@ in
username = "jupiter@karaolidis.com"; username = "jupiter@karaolidis.com";
sender = "jupiter@karaolidis.com"; sender = "jupiter@karaolidis.com";
}; };
}; };
in in
{ {
@@ -185,9 +185,6 @@ in
environmentFiles = [ hmConfig.sops.templates."authelia-postgresql.env".path ]; environmentFiles = [ hmConfig.sops.templates."authelia-postgresql.env".path ];
entrypoint = "/entrypoint.sh"; entrypoint = "/entrypoint.sh";
exec = [ "postgres" ]; exec = [ "postgres" ];
user = "999";
group = "999";
userns = "keep-id:uid=999,gid=999";
}; };
unitConfig.After = [ "sops-nix.service" ]; unitConfig.After = [ "sops-nix.service" ];
@@ -199,17 +196,14 @@ in
networks = [ networks.authelia.ref ]; networks = [ networks.authelia.ref ];
volumes = [ "${volumes."authelia-redis".ref}:/data" ]; volumes = [ "${volumes."authelia-redis".ref}:/data" ];
exec = [ "--save 60 1" ]; exec = [ "--save 60 1" ];
user = "999";
group = "999";
userns = "keep-id:uid=999,gid=999";
}; };
}; };
}; };
systemd.user.tmpfiles.rules = [ systemd.user.tmpfiles.rules = [
"d ${home}/.local/share/authelia/config 0755 ${user} ${user}" "d ${home}/.local/share/authelia/config :0755 :${user} :${user}"
"f ${home}/.local/share/authelia/config/users.yaml 644 ${user} ${user}" "f ${home}/.local/share/authelia/config/users.yaml :0644 :${user} :${user}"
"d ${home}/.local/share/authelia/postgresql 0700 ${user} ${user}" "d ${home}/.local/share/authelia/postgresql :0755 :${user} :${user}"
]; ];
}; };
} }