upRootNutrition/dotfiles
upRootNutrition/dotfiles
1
0
Fork 0
mirror of https://gitlab.com/upRootNutrition/dotfiles.git synced 2025-12-06 13:07:13 -06:00
Code Issues Projects 1 Releases Packages Wiki Activity Actions

fix: samba perms unfucked

Browse source
This commit is contained in:
Nick 2025-11-29 05:01:10 -06:00
parent d788440daa
commit ecbbebfd90
3 changed files with 31 additions and 6 deletions
Download patch file Download diff file Expand all files Collapse all files

4
modules/config/default.nix
View file

@ -234,8 +234,8 @@ in
"IdentityFile=/var/run/secrets/ssh/private"
];
fileModeAndDirMode = [
"file_mode=0644"
"dir_mode=0755"
"file_mode=0664"
"dir_mode=0775"
];
userIdForUser0 = [
"uid=1000"

28
modules/nixos/guests/jellyfin/default.nix
View file

@ -37,6 +37,16 @@ in
};
};
users.users.jellyfin = {
isSystemUser = true;
group = serviceCfg.name;
uid = 993;
};
users.groups.jellyfin = {
gid = 993;
};
networking.firewall.allowedTCPPorts = [
22
serviceCfg.ports.port0
@ -48,7 +58,7 @@ in
device = "tmpfs";
fsType = "tmpfs";
options = [
"size=4G"
"size=6G"
"mode=1777"
];
};
@ -166,13 +176,27 @@ in
};
};
};
users = {
groups.jellyfin = {
gid = 993;
members = [ user0 ];
};
users.users.caddy.extraGroups = [ "acme" ];
users = {
jellyfin = {
isSystemUser = true;
group = serviceCfg.name;
uid = 993;
};
caddy.extraGroups = [ "acme" ];
};
};
systemd.tmpfiles.rules = [
"d ${serviceCfg.mntPaths.path0} 0755 microvm wheel - -"
"d ${serviceCfg.mntPaths.path0}/data 0755 microvm wheel - -"
"d ${serviceCfg.mntPaths.path0}/cache 0755 microvm wheel - -"
"d ${serviceCfg.mntPaths.path0}/media 0775 microvm wheel - -"
"Z ${serviceCfg.mntPaths.path0}/media 0775 jellyfin jellyfin - -"
];
}

5
modules/nixos/services/samba/sambaCeres/default.nix
View file

@ -6,6 +6,7 @@ let
inherit (flake.config.services) instances;
inherit (flake.config.people) user0;
service = instances.samba;
jellyfin = instances.jellyfin;
in
{
# If you ever need to start fresh, you need to add yourself to the Samba users database:
@ -23,8 +24,8 @@ in
"guest ok" = "no";
"create mask" = "0664";
"directory mask" = "0775";
"force user" = user0;
"force group" = "users";
"force user" = jellyfin.name;
"force group" = jellyfin.name;
"force create mode" = "0664";
"force directory mode" = "0775";
};