tailscale
This commit is contained in:
@@ -1,29 +1,13 @@
|
||||
{ ... }:
|
||||
{
|
||||
fileSystems =
|
||||
let
|
||||
bindRO = src: {
|
||||
device = src;
|
||||
fsType = "none";
|
||||
options = [ "bind" "ro" ];
|
||||
};
|
||||
bindHide = src: {
|
||||
device = "tmpfs";
|
||||
fsType = "tmpfs";
|
||||
options = [ "size=0" "mode=000" ];
|
||||
};
|
||||
in
|
||||
{
|
||||
"/home/openclaw/private/AT Protocol" = bindHide "/private/AT Protocol";
|
||||
"/home/openclaw/private/cloudflared" = bindHide "/private/cloudflared";
|
||||
"/home/openclaw/private/vaultwarden" = bindHide "/private/vaultwarden";
|
||||
"/home/openclaw/protected" = bindHide "/protected";
|
||||
};
|
||||
|
||||
systemd.tmpfiles.rules = [
|
||||
"d /home/openclaw/private 0750 openclaw openclaw -"
|
||||
"d /home/openclaw/protected 0000 root root -"
|
||||
"f /home/openclaw/private/tangled.env 0000 root root -"
|
||||
"f /home/openclaw/private/cloudflared.pem 0000 root root -"
|
||||
"d /private 0750 root root -"
|
||||
"z /private/AT\x20Protocol 0700 root root -"
|
||||
"z /private/cloudflared 0700 root root -"
|
||||
"z /private/cloudflared.pem 0600 root root -"
|
||||
"z /private/wafrn 0700 root root -"
|
||||
"z /private/tangled.env 0600 root root -"
|
||||
"z /private/vaultwarden 0700 root root -"
|
||||
"z /protected 0700 root root -"
|
||||
];
|
||||
}
|
||||
|
||||
Reference in New Issue
Block a user