mkforce
This commit is contained in:
@@ -41,12 +41,13 @@ in
|
|||||||
};
|
};
|
||||||
services = {
|
services = {
|
||||||
tailscale.enable = true;
|
tailscale.enable = true;
|
||||||
|
open-webui.enable = lib.mkForce false;
|
||||||
|
ollama.enable = lib.mkForce false;
|
||||||
sunshine = {
|
sunshine = {
|
||||||
enable = true;
|
enable = true;
|
||||||
autoStart = true;
|
autoStart = true;
|
||||||
capSysAdmin = true;
|
capSysAdmin = true;
|
||||||
openFirewall = true;
|
openFirewall = true;
|
||||||
|
|
||||||
};
|
};
|
||||||
};
|
};
|
||||||
users.users.bearded_dragonn = {
|
users.users.bearded_dragonn = {
|
||||||
|
|||||||
@@ -134,7 +134,6 @@ in
|
|||||||
../../secrets/ssh/root-private-ca.pem
|
../../secrets/ssh/root-private-ca.pem
|
||||||
];
|
];
|
||||||
services = {
|
services = {
|
||||||
minio.enable = true;
|
|
||||||
flatpak.enable = true;
|
flatpak.enable = true;
|
||||||
open-webui.enable = true;
|
open-webui.enable = true;
|
||||||
scx = {
|
scx = {
|
||||||
@@ -155,27 +154,4 @@ in
|
|||||||
models = "/srv/ai/ollama";
|
models = "/srv/ai/ollama";
|
||||||
};
|
};
|
||||||
};
|
};
|
||||||
systemd.services.minio-init = {
|
|
||||||
description = "Initialize MinIO buckets";
|
|
||||||
after = [ "minio.service" ];
|
|
||||||
wantedBy = [ "multi-user.target" ];
|
|
||||||
serviceConfig = {
|
|
||||||
Type = "oneshot";
|
|
||||||
RemainAfterExit = true;
|
|
||||||
};
|
|
||||||
script = ''
|
|
||||||
# Wait for MinIO to be ready
|
|
||||||
until ${pkgs.curl}/bin/curl -sf http://localhost:9000/minio/health/live > /dev/null 2>&1; do
|
|
||||||
echo "Waiting for MinIO..."
|
|
||||||
sleep 1
|
|
||||||
done
|
|
||||||
|
|
||||||
# Configure mc alias and create bucket
|
|
||||||
${pkgs.minio-client}/bin/mc alias set local http://localhost:9000 minioadmin minioadmin || true
|
|
||||||
${pkgs.minio-client}/bin/mc mb local/webref || true
|
|
||||||
${pkgs.minio-client}/bin/mc anonymous set public local/webref || true
|
|
||||||
|
|
||||||
echo "MinIO initialized with webref bucket"
|
|
||||||
'';
|
|
||||||
};
|
|
||||||
}
|
}
|
||||||
|
|||||||
@@ -59,7 +59,7 @@ in
|
|||||||
LD_LIBRARY_PATH = "${pkgs.stdenv.cc.cc.lib}/lib:${pkgs.glibc}/lib:${pkgs.zlib}/lib:${pkgs.libffi}/lib:${pkgs.openssl}/lib";
|
LD_LIBRARY_PATH = "${pkgs.stdenv.cc.cc.lib}/lib:${pkgs.glibc}/lib:${pkgs.zlib}/lib:${pkgs.libffi}/lib:${pkgs.openssl}/lib";
|
||||||
};
|
};
|
||||||
serviceConfig = {
|
serviceConfig = {
|
||||||
PrivateUsers = false;
|
PrivateUsers = lib.mkForce false;
|
||||||
BindReadOnlyPaths = lib.mkForce [ ];
|
BindReadOnlyPaths = lib.mkForce [ ];
|
||||||
BindPaths = lib.mkIf (cfgS.settings != { }) (map (stash: "${stash.path}") cfgS.settings.stash);
|
BindPaths = lib.mkIf (cfgS.settings != { }) (map (stash: "${stash.path}") cfgS.settings.stash);
|
||||||
};
|
};
|
||||||
|
|||||||
Reference in New Issue
Block a user