A fork of attic a self-hostable Nix Binary Cache server
Merge pull request #49 from icewind1991/module-readwritepaths
nixos: add storage path to ReadWritePaths
authored by
Zhaofeng Li
and committed by
GitHub
a7c878bf
e6bedf18
+4
+4
nixos/atticd.nix
+4
nixos/atticd.nix
···
203
203
RestrictNamespaces = true;
204
204
RestrictRealtime = true;
205
205
RestrictSUIDSGID = true;
206
+
ReadWritePaths = let
207
+
path = cfg.settings.storage.path;
208
+
isDefaultStateDirectory = path == "/var/lib/atticd" || lib.hasPrefix "/var/lib/atticd/" path;
209
+
in lib.optionals (cfg.settings.storage.type or "" == "local" && !isDefaultStateDirectory) [ path ];
206
210
};
207
211
};
208
212