karaolidis/nix
1
1
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Fix rootless podman permissions

Browse Source 
Signed-off-by: Nikolaos Karaolidis <nick@karaolidis.com>
This commit is contained in:
Nick Karaolidis
2025-03-08 11:59:01 +00:00
parent ad46eb6546
commit bdaac67bf2
5 changed files with 9 additions and 11 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
hosts/eirene/format.nix
View File

@@ -48,6 +48,7 @@
mountOptions = [
"compress=zstd:1"
"noatime"
"user_subvol_rm_allowed"
];
in
{

1
hosts/elara/format.nix
View File

@@ -48,6 +48,7 @@
mountOptions = [
"compress=zstd:3"
"noatime"
"user_subvol_rm_allowed"
];
in
{

1
hosts/installer/format.nix
View File

@@ -40,6 +40,7 @@
mountOptions = [
"compress=zstd:5"
"noatime"
"user_subvol_rm_allowed"
];
in
{

1
hosts/jupiter/format.nix
View File

@@ -51,6 +51,7 @@
mountOptions = [
"compress=zstd:1"
"noatime"
"user_subvol_rm_allowed"
];
in
{

16
hosts/jupiter/users/storm/configs/console/podman/authelia/default.nix
View File

@@ -69,7 +69,8 @@ in
"/workdir/users.yaml"
"-i"
];
userns = "keep-id:uid=1000,gid=1000";
user = "0";
group = "0";
};
serviceConfig = {
@@ -123,7 +124,6 @@ in
username = "jupiter@karaolidis.com";
sender = "jupiter@karaolidis.com";
};
};
in
{
@@ -185,9 +185,6 @@ in
environmentFiles = [ hmConfig.sops.templates."authelia-postgresql.env".path ];
entrypoint = "/entrypoint.sh";
exec = [ "postgres" ];
user = "999";
group = "999";
userns = "keep-id:uid=999,gid=999";
};
unitConfig.After = [ "sops-nix.service" ];
@@ -199,17 +196,14 @@ in
networks = [ networks.authelia.ref ];
volumes = [ "${volumes."authelia-redis".ref}:/data" ];
exec = [ "--save 60 1" ];
user = "999";
group = "999";
userns = "keep-id:uid=999,gid=999";
};
};
};
systemd.user.tmpfiles.rules = [
"d ${home}/.local/share/authelia/config 0755 ${user} ${user}"
"f ${home}/.local/share/authelia/config/users.yaml 644 ${user} ${user}"
"d ${home}/.local/share/authelia/postgresql 0700 ${user} ${user}"
"d ${home}/.local/share/authelia/config :0755 :${user} :${user}"
"f ${home}/.local/share/authelia/config/users.yaml :0644 :${user} :${user}"
"d ${home}/.local/share/authelia/postgresql :0755 :${user} :${user}"
];
};
}