starred/nix-config
1
0
Fork 0
mirror of https://github.com/ryan4yin/nix-config.git synced 2026-04-24 01:38:28 +02:00
Code Issues Packages Projects Releases 10 Wiki Activity

fix: aqua - fileshare permission

Browse Source
This commit is contained in:
Ryan Yin
2026-03-20 00:44:35 +08:00
parent be9be72aff
commit 3e3365f51f
2 changed files with 13 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
hosts/idols-aquamarine/sftpgo.nix
View File

@@ -1,4 +1,4 @@
{ config, ... }: { config, lib, ... }:
let let
user = "sftpgo"; user = "sftpgo";
dataDir = "/data/apps/sftpgo"; dataDir = "/data/apps/sftpgo";
@@ -19,12 +19,14 @@ in
# regardless of the creating process's primary group. # regardless of the creating process's primary group.
systemd.tmpfiles.rules = [ systemd.tmpfiles.rules = [
"d ${dataDir} 0755 ${user} ${user} -" "d ${dataDir} 0755 ${user} ${user} -"
"d /data/fileshare/public 2775 root fileshare -"
]; ];
services.sftpgo = { services.sftpgo = {
enable = true; enable = true;
inherit user dataDir; inherit user dataDir;
extraReadWriteDirs = [
"/data/fileshare"
];
extraArgs = [ extraArgs = [
"--log-level" "--log-level"
"info" "info"

12
hosts/idols-aquamarine/transmission.nix
View File

@@ -17,7 +17,14 @@ in
# The setgid bit (2) causes all files created here to inherit the group # The setgid bit (2) causes all files created here to inherit the group
# 'fileshare', regardless of which service creates them. # 'fileshare', regardless of which service creates them.
systemd.tmpfiles.rules = [ systemd.tmpfiles.rules = [
# Keep shared parent owned by root to avoid tmpfiles "unsafe path transition"
# when another service creates subdirectories under /data/fileshare/public.
"d /data/fileshare 2775 root fileshare -"
"d ${dataDir} 2775 ${name} fileshare -" "d ${dataDir} 2775 ${name} fileshare -"
"d ${dataDir}/incomplete 2775 ${name} fileshare -"
"d ${dataDir}/downloads 2775 ${name} fileshare -"
"d ${dataDir}/watch 2775 ${name} fileshare -"
]; ];
# the headless Transmission BitTorrent daemon # the headless Transmission BitTorrent daemon
@@ -28,9 +35,8 @@ in
package = pkgs.transmission_4; package = pkgs.transmission_4;
user = name; user = name;
group = name; group = name;
home = dataDir; # 2775: setgid preserves fileshare group on download/incomplete dirs.
# 2770: setgid preserves fileshare group on download/incomplete dirs. downloadDirPermissions = "2775";
downloadDirPermissions = "2770";
# Whether to enable tweaking of kernel parameters to open many more connections at the same time. # Whether to enable tweaking of kernel parameters to open many more connections at the same time.
# Note that you may also want to increase peer-limit-global. # Note that you may also want to increase peer-limit-global.