padreug/krops-multi-deploy
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

FIX: directory permissions and symlink management

Browse source 
Updated the lnbits.nix configuration to set appropriate permissions on the extensions directory and create a symlink for LNBits extensions, improving security and functionality.
This commit is contained in:
padreug 2025-10-12 07:35:28 +02:00
parent aa0381c42b
commit 78dcba25ec
1 changed files with 9 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

12
config/lnbits.nix
View file

@ -4,9 +4,9 @@ let
lnbitsFlake = builtins.getFlake "path:/var/src/lnbits-src"; lnbitsFlake = builtins.getFlake "path:/var/src/lnbits-src";
in in
{ {
# Import the LNBits service module directly from the flake's nix/modules directory # Import the LNBits service module from the flake (following official guide pattern)
imports = [ imports = [
/var/src/lnbits-src/nix/modules/lnbits-service.nix "${lnbitsFlake}/nix/modules/lnbits-service.nix"
]; ];
# LNBits service configuration # LNBits service configuration
@ -99,11 +99,17 @@ in
# #
# Option 1: Replace extensions directory entirely (use with caution) # Option 1: Replace extensions directory entirely (use with caution)
systemd.tmpfiles.rules = [ systemd.tmpfiles.rules = [
"L+ /var/lib/lnbits/extensions - - - - /var/src/lnbits-extensions" # Set permissions on source directory so lnbits user can read it
"d /var/src/lnbits-extensions 0755 lnbits lnbits - -"
# Create symlink with proper ownership
"L+ /var/lib/lnbits/extensions - lnbits lnbits - /var/src/lnbits-extensions"
]; ];
# #
# Option 2: Manually merge deployed extensions with existing ones # Option 2: Manually merge deployed extensions with existing ones
# Copy deployed extensions into the extensions directory without replacing it: # Copy deployed extensions into the extensions directory without replacing it:
# systemd.tmpfiles.rules = [
# "d /var/src/lnbits-extensions 0755 lnbits lnbits - -"
# ];
# systemd.services.lnbits-copy-extensions = { # systemd.services.lnbits-copy-extensions = {
# description = "Copy deployed LNBits extensions"; # description = "Copy deployed LNBits extensions";
# before = [ "lnbits.service" ]; # before = [ "lnbits.service" ];