Compare commits
45 commits
376a622549
...
5abcc66191
Author | SHA1 | Date | |
---|---|---|---|
Bruno BELANYI | 5abcc66191 | ||
Bruno BELANYI | c7fc4c2c67 | ||
Bruno BELANYI | 489802efbe | ||
Bruno BELANYI | ac9eeea26d | ||
Bruno BELANYI | a0b91a5d18 | ||
Bruno BELANYI | 6b78d89065 | ||
Bruno BELANYI | 4c12fc0094 | ||
Bruno BELANYI | 217c69cc9f | ||
Bruno BELANYI | 31c20c5b1b | ||
Bruno BELANYI | 795026e918 | ||
Bruno BELANYI | b376366d7b | ||
Bruno BELANYI | 1f6c40c3eb | ||
Bruno BELANYI | aa6baa82e8 | ||
Bruno BELANYI | f860452c1c | ||
Bruno BELANYI | a1bc64cf48 | ||
Bruno BELANYI | b8325e8ea7 | ||
Bruno BELANYI | 0dccde9edf | ||
Bruno BELANYI | 260f1e9b5c | ||
Bruno BELANYI | 178f6825c0 | ||
Bruno BELANYI | 629e5d99f5 | ||
Bruno BELANYI | 370c8354da | ||
Bruno BELANYI | c7cc887322 | ||
Bruno BELANYI | 6f27b15781 | ||
Bruno BELANYI | e4916ddb88 | ||
Bruno BELANYI | 4569fe8a29 | ||
Bruno BELANYI | b8f4dd33ee | ||
Bruno BELANYI | fc98fe2b3e | ||
Bruno BELANYI | 82e56bf80c | ||
Bruno BELANYI | bdc008d0fc | ||
Bruno BELANYI | 5f607efee8 | ||
Bruno BELANYI | 5c5738e1d8 | ||
Bruno BELANYI | 7d8a18c968 | ||
Bruno BELANYI | 4fb2447648 | ||
Bruno BELANYI | ef88c7561b | ||
Bruno BELANYI | 4e2055da7f | ||
Bruno BELANYI | 2f3b9950e1 | ||
Bruno BELANYI | 8607b3c577 | ||
Bruno BELANYI | 257c0675e2 | ||
Bruno BELANYI | 55fd694c69 | ||
Bruno BELANYI | 2a20ecbd1e | ||
Bruno BELANYI | fa732c88e4 | ||
Bruno BELANYI | 99a3bd2587 | ||
Bruno BELANYI | e40247ed81 | ||
Bruno BELANYI | 1dcf5a1f1c | ||
Bruno BELANYI | 7b21943693 |
|
@ -71,7 +71,7 @@ in
|
||||||
|
|
||||||
my.system.persist.directories = [
|
my.system.persist.directories = [
|
||||||
cfg.downloadDir
|
cfg.downloadDir
|
||||||
config.users.users.aria2.home
|
"/var/lib/aria2"
|
||||||
];
|
];
|
||||||
|
|
||||||
# NOTE: unfortunately aria2 does not log connection failures for fail2ban
|
# NOTE: unfortunately aria2 does not log connection failures for fail2ban
|
||||||
|
|
|
@ -35,7 +35,7 @@ in
|
||||||
};
|
};
|
||||||
|
|
||||||
my.system.persist.directories = [
|
my.system.persist.directories = [
|
||||||
"/var/lib/${config.systemd.services.fail2ban.serviceConfig.StateDirectory}"
|
"/var/lib/fail2ban"
|
||||||
];
|
];
|
||||||
};
|
};
|
||||||
}
|
}
|
||||||
|
|
|
@ -29,7 +29,7 @@ in
|
||||||
};
|
};
|
||||||
|
|
||||||
my.system.persist.directories = [
|
my.system.persist.directories = [
|
||||||
"/var/lib/${config.systemd.services.flood.serviceConfig.StateDirectory}"
|
"/var/lib/flood"
|
||||||
];
|
];
|
||||||
|
|
||||||
# NOTE: unfortunately flood does not log connection failures for fail2ban
|
# NOTE: unfortunately flood does not log connection failures for fail2ban
|
||||||
|
|
|
@ -67,7 +67,7 @@ in
|
||||||
};
|
};
|
||||||
|
|
||||||
my.system.persist.directories = [
|
my.system.persist.directories = [
|
||||||
"/var/lib/${config.systemd.services.prowlarr.serviceConfig.StateDirectory}"
|
"/var/lib/prowlarr"
|
||||||
];
|
];
|
||||||
|
|
||||||
services.fail2ban.jails = {
|
services.fail2ban.jails = {
|
||||||
|
|
|
@ -39,7 +39,7 @@ in
|
||||||
};
|
};
|
||||||
|
|
||||||
my.system.persist.directories = [
|
my.system.persist.directories = [
|
||||||
"/var/lib/${config.systemd.services.jellyfin.serviceConfig.StateDirectory}"
|
"/var/lib/jellyfin"
|
||||||
];
|
];
|
||||||
|
|
||||||
services.fail2ban.jails = {
|
services.fail2ban.jails = {
|
||||||
|
|
|
@ -109,7 +109,7 @@ in
|
||||||
};
|
};
|
||||||
|
|
||||||
my.system.persist.directories = [
|
my.system.persist.directories = [
|
||||||
"/var/lib/${config.systemd.services.lohr.serviceConfig.StateDirectory}"
|
"/var/lib/lohr"
|
||||||
];
|
];
|
||||||
};
|
};
|
||||||
}
|
}
|
||||||
|
|
|
@ -74,14 +74,10 @@ in
|
||||||
|
|
||||||
my.services.backup = {
|
my.services.backup = {
|
||||||
paths = [
|
paths = [
|
||||||
config.systemd.services.mealie.environment.DATA_DIR
|
"/var/lib/mealie"
|
||||||
];
|
];
|
||||||
};
|
};
|
||||||
|
|
||||||
my.system.persist.directories = [
|
|
||||||
config.systemd.services.mealie.environment.DATA_DIR
|
|
||||||
];
|
|
||||||
|
|
||||||
services.fail2ban.jails = {
|
services.fail2ban.jails = {
|
||||||
mealie = ''
|
mealie = ''
|
||||||
enabled = true
|
enabled = true
|
||||||
|
|
|
@ -54,7 +54,7 @@ in
|
||||||
};
|
};
|
||||||
|
|
||||||
my.system.persist.directories = [
|
my.system.persist.directories = [
|
||||||
"/var/lib/${config.systemd.services.navidrome.serviceConfig.StateDirectory}"
|
"/var/lib/navidrome"
|
||||||
];
|
];
|
||||||
|
|
||||||
services.fail2ban.jails = {
|
services.fail2ban.jails = {
|
||||||
|
|
|
@ -94,7 +94,6 @@ in
|
||||||
|
|
||||||
my.system.persist.directories = [
|
my.system.persist.directories = [
|
||||||
config.services.nextcloud.home
|
config.services.nextcloud.home
|
||||||
config.services.nextcloud.datadir
|
|
||||||
];
|
];
|
||||||
|
|
||||||
services.fail2ban.jails = {
|
services.fail2ban.jails = {
|
||||||
|
|
|
@ -488,7 +488,7 @@ in
|
||||||
};
|
};
|
||||||
|
|
||||||
my.system.persist.directories = [
|
my.system.persist.directories = [
|
||||||
config.users.user.acme.home
|
"/var/lib/acme"
|
||||||
];
|
];
|
||||||
};
|
};
|
||||||
}
|
}
|
||||||
|
|
|
@ -148,8 +148,8 @@ in
|
||||||
};
|
};
|
||||||
|
|
||||||
my.system.persist.directories = [
|
my.system.persist.directories = [
|
||||||
config.services.paperless-ng.dataDir
|
config.services.paperless.dataDir
|
||||||
config.services.paperless-ng.mediaDir
|
config.services.paperless.mediaDir
|
||||||
];
|
];
|
||||||
};
|
};
|
||||||
}
|
}
|
||||||
|
|
|
@ -55,7 +55,7 @@ in
|
||||||
};
|
};
|
||||||
|
|
||||||
my.system.persist.directories = [
|
my.system.persist.directories = [
|
||||||
"/var/lib/${config.systemd.services.stirling-pdf.serviceConfig.StateDirectory}"
|
"/var/lib/stirling-pdf"
|
||||||
];
|
];
|
||||||
|
|
||||||
services.fail2ban.jails = {
|
services.fail2ban.jails = {
|
||||||
|
|
|
@ -55,7 +55,7 @@ in
|
||||||
|
|
||||||
my.system.persist.directories = [
|
my.system.persist.directories = [
|
||||||
cfg.downloadDirectory
|
cfg.downloadDirectory
|
||||||
"/var/lib/${config.systemd.services.pyload.StateDirectory}"
|
"/var/lib/pyload"
|
||||||
];
|
];
|
||||||
|
|
||||||
services.fail2ban.jails = {
|
services.fail2ban.jails = {
|
||||||
|
|
|
@ -26,7 +26,7 @@ let
|
||||||
dataDir =
|
dataDir =
|
||||||
if service != "bazarr"
|
if service != "bazarr"
|
||||||
then config.services.${service}.dataDir
|
then config.services.${service}.dataDir
|
||||||
else config.users.user.${service}.home;
|
else "/var/lib/bazarr";
|
||||||
in
|
in
|
||||||
[ dataDir ];
|
[ dataDir ];
|
||||||
};
|
};
|
||||||
|
|
|
@ -85,17 +85,14 @@ in
|
||||||
|
|
||||||
my.services.backup = {
|
my.services.backup = {
|
||||||
paths = [
|
paths = [
|
||||||
"/var/lib/${config.systemd.services.tandoor-recipes.StateDirectory}"
|
"/var/lib/tandoor-recipes"
|
||||||
config.systemd.services.tandoor-recipes.environment.MEDIA_ROOT
|
|
||||||
];
|
];
|
||||||
};
|
};
|
||||||
|
|
||||||
my.system.persist.directories = [
|
my.system.persist.directories = [
|
||||||
"/var/lib/${config.systemd.services.tandoor-recipes.StateDirectory}"
|
"/var/lib/tandoor-recipes"
|
||||||
config.systemd.services.tandoor-recipes.environment.MEDIA_ROOT
|
|
||||||
];
|
];
|
||||||
|
|
||||||
|
|
||||||
# NOTE: unfortunately tandoor-recipes does not log connection failures for fail2ban
|
# NOTE: unfortunately tandoor-recipes does not log connection failures for fail2ban
|
||||||
};
|
};
|
||||||
}
|
}
|
||||||
|
|
|
@ -92,6 +92,7 @@ in
|
||||||
};
|
};
|
||||||
|
|
||||||
my.system.persist.directories = [
|
my.system.persist.directories = [
|
||||||
|
cfg.downloadBase
|
||||||
config.services.transmission.home
|
config.services.transmission.home
|
||||||
];
|
];
|
||||||
|
|
||||||
|
|
|
@ -50,7 +50,7 @@ in
|
||||||
"/etc/machine-id" # Machine-specific ID
|
"/etc/machine-id" # Machine-specific ID
|
||||||
"/etc/adjtime" # Clock drift factor and offsets
|
"/etc/adjtime" # Clock drift factor and offsets
|
||||||
]
|
]
|
||||||
++ cfg.files
|
++ lib.unique cfg.files
|
||||||
;
|
;
|
||||||
|
|
||||||
directories = [
|
directories = [
|
||||||
|
@ -63,7 +63,7 @@ in
|
||||||
"/var/spool" # FIXME: needed?
|
"/var/spool" # FIXME: needed?
|
||||||
"/var/tmp" # FIXME: needed?
|
"/var/tmp" # FIXME: needed?
|
||||||
]
|
]
|
||||||
++ cfg.directories
|
++ lib.unique cfg.directories
|
||||||
;
|
;
|
||||||
};
|
};
|
||||||
};
|
};
|
||||||
|
|
Loading…
Reference in a new issue