satr14/nix-flake
1
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Compare commits

base: satr14:853e5a3d99cc89795a8bdb5fe1d0a8f2cf26d6d3
Branches Tags
satr14:main
satr14:mc-backup
satr14:sops-implementation
..
compare: satr14:d4de48420f06c77dc06ea6694b5c093ea2685491
Branches Tags
satr14:main
satr14:mc-backup
satr14:sops-implementation

2 commits
853e5a3d99 ... d4de48420f

Author SHA1 Message Date
satr14
d4de48420f bind mount loophole
Some checks failed
Activate Homelab Configuration / rebuild (push) Failing after 5s
Details
2026-05-01 08:05:02 +07:00
satr14
14a65b8c7e revert not working fix 2026-05-01 07:58:04 +07:00
2 changed files with 12 additions and 15 deletions
Download patch file Download diff file Expand all files Collapse all files

20
modules/system/homelab/docs.nix
View file

@ -3,10 +3,6 @@
sandbox = "docs-sandbox.${homelab.domain}";
data-dir = "/mnt/data/apps/cryptpad";
in {
systemd.tmpfiles.rules = [
"d ${data-dir} 0750 cryptpad cryptpad -"
];
services.cryptpad = {
enable = true;
settings = {
@ -16,16 +12,12 @@ in {
httpSafeOrigin = "https://${sandbox}";
blockDailyCheck = true;
disableIntegratedEviction = true;
archivePath = "${data-dir}/archive";
pinPath = "${data-dir}/pins";
taskPath = "${data-dir}/tasks";
blockPath = "${data-dir}/block";
blobPath = "${data-dir}/blob";
blobStagingPath = "${data-dir}/blobstage";
decreePath = "${data-dir}/decrees";
logPath = "${data-dir}/logs";
};
};
systemd.services.cryptpad.serviceConfig.ReadWritePaths = [ data-dir ];
fileSystems."/var/lib/cryptpad" = {
device = "/mnt/data/apps/cryptpad";
dependsOn = [ "/mnt/data" ];
options = [ "bind" "nofail" ];
};
}

7
modules/system/homelab/pass.nix
View file

@ -5,10 +5,15 @@
backupDir = "/mnt/data/apps/vaultwarden/backups";
environmentFile = "/mnt/data/apps/vaultwarden/.env";
config = {
DATA_FOLDER = "/mnt/data/apps/vaultwarden/data";
ROCKET_PORT = 8060;
ROCKET_ADDRESS = "127.0.0.1";
ROCKET_LOG = "critical";
};
};
fileSystems."/var/lib/vaultwarden" = {
device = "/mnt/data/apps/vaultwarden/data";
dependsOn = [ "/mnt/data" ];
options = [ "bind" "nofail" ];
};
}