Added common access layer for internal services

This commit is contained in:
Illia Chub 2021-12-23 09:26:09 +02:00
parent 2a15727170
commit cccbd177be
No known key found for this signature in database
GPG key ID: 5D3581534C02467A
2 changed files with 8 additions and 2 deletions

View file

@ -22,9 +22,10 @@ in
'';
in
[
(if cfg.bitwarden.enable then "d /var/lib/bitwarden 0777 bitwarden_rs bitwarden_rs -" else "")
(if cfg.bitwarden.enable then "d /var/lib/bitwarden/backup 0777 bitwarden_rs bitwarden_rs -" else "")
(if cfg.bitwarden.enable then "d /var/lib/bitwarden 0777 vaultwarden vaultwarden -" else "")
(if cfg.bitwarden.enable then "d /var/lib/bitwarden/backup 0777 vaultwarden vaultwarden -" else "")
(if cfg.pleroma.enable then "d /var/lib/pleroma 0700 pleroma pleroma - -" else "")
"d /var 0740 root shared - -"
"d /var/lib/restic 0700 restic - - -"
"f+ /var/lib/restic/pass 0400 restic - - ${resticPass}"
"f+ /root/.config/rclone/rclone.conf 0400 root root - ${rcloneConfig}"

View file

@ -21,5 +21,10 @@ in
};
})
cfg.users);
groups = {
shared = {
members = [ "restic" ];
};
};
};
}