From d6fbde9230fcc62e59aa8baf61b753c1ec7ea01a Mon Sep 17 00:00:00 2001
From: alexion <contact@alexion.dev>
Date: Mon, 12 Oct 2026 11:54:39 -0400
Subject: [PATCH] fix(copyparty): apply volume permissions

---
 configs/nixos/guests/copyparty.nix           | 1 +
 configs/nixos/modules/services/copyparty.nix | 8 +++-----
 2 files changed, 4 insertions(+), 5 deletions(-)

diff --git a/configs/nixos/guests/copyparty.nix b/configs/nixos/guests/copyparty.nix
index fd4d9b7..80aa57e 100644
--- a/configs/nixos/guests/copyparty.nix
+++ b/configs/nixos/guests/copyparty.nix
@@ -133,6 +133,7 @@ in
       // lib.mapAttrs' (
         _urlPath: volume:
         lib.nameValuePair volume.path {
+          inherit (volume) readOnly;
           directory = volume.hostPath;
           owner = "root";
           group = "storage";
diff --git a/configs/nixos/modules/services/copyparty.nix b/configs/nixos/modules/services/copyparty.nix
index 25c1459..8dd0f15 100644
--- a/configs/nixos/modules/services/copyparty.nix
+++ b/configs/nixos/modules/services/copyparty.nix
@@ -42,7 +42,7 @@ let
     set -eu
 
     umask 077
-    password="$(${pkgs.coreutils}/bin/tr -d '\n' < "$CREDENTIALS_DIRECTORY/password")"
+    password="$(${lib.getExe' pkgs.coreutils "tr"} -d '\n' < "$CREDENTIALS_DIRECTORY/password")"
 
     cat > /run/copyparty/copyparty.conf <<EOF
     [global]
@@ -81,10 +81,8 @@ let
       ${volume.path}
       accs:
     ${lib.concatStringsSep "\n" (lib.mapAttrsToList renderAccess volume.access)}
-    ${lib.optionalString (volume.flags != [ ]) ''
-        flags:
-      ${renderFlags volume.flags}
-    ''}
+      flags:
+    ${renderFlags volume.flags}
   '';
 
   renderTrustedSource = source: "  xff-src: ${source}";
-- 
2.47.3