feat(copyparty): add read-only root volume

2026-09-14 22:50:45 -04:00
parent 6159d87d10
commit a73b59aa0a
4 changed files with 24 additions and 2 deletions
--- a/configs/nixos/hosts/pikachu/default.nix
+++ b/configs/nixos/hosts/pikachu/default.nix
@@ -158,6 +158,12 @@
      trustedSources = [ "${registry.address.${config.networking.hostName}."reverse-proxy"}/32" ];
    };
    volumes = {
+      "/" = {
+        hostPath = "/pikachu/data/copyparty/root";
+        path = "/srv";
+        access.r = [ "alexion" ];
+        readOnly = true;
+      };
      "/inbox" = {
        hostPath = "/pikachu/__inbox";
        path = "/srv/inbox";