Commit d2cdee87ead2
Changed files (1)
systems
kerkouane
systems/kerkouane/extra.nix
@@ -66,9 +66,9 @@ in
# Setup permissions for git directories (via systemd tmpfiles)
systemd.tmpfiles.rules = [
- "d /home/vincent 0711 vincent users -" # Allow traversal to git directory
- "d /home/vincent/git 0700 vincent users -" # Private git directory
- "d /home/vincent/git/public 0755 vincent users -" # Public repositories only
+ "d /home/vincent 0711 vincent users -" # Allow traversal to git directory
+ "d /home/vincent/git 0700 vincent users -" # Private git directory
+ "d /home/vincent/git/public 0755 vincent users -" # Public repositories only
];
# Disable TPM2 (VPS has no TPM hardware)
@@ -129,7 +129,7 @@ in
};
# Allow Caddy to access public git repositories only (override ProtectHome)
systemd.services.caddy.serviceConfig = {
- ProtectHome = lib.mkForce "tmpfs"; # Allow read access to /home with bind mounts
+ ProtectHome = lib.mkForce "tmpfs"; # Allow read access to /home with bind mounts
BindReadOnlyPaths = [ "/home/vincent/git/public" ];
};