fix tmpfs

2026-05-08 21:05:08 +02:00
parent 5de459c347
commit aacca16eb2
2 changed files with 1 additions and 2 deletions
--- a/modules/server/containers/defs/nextcloud.nix
+++ b/modules/server/containers/defs/nextcloud.nix
@@ -44,7 +44,7 @@ in {
        "traefik.http.middlewares.sts_headers.headers.stsIncludeSubdomains" = "true";
      };
      extraOptions = [
-        "--tmpfs /tmp:rw,mode=1777"
+        "--tmpfs=/tmp:rw,noexec,nosuid,size=64m"
      ];
      overrides = {
        ports = if containerCfg.pubPort!=null && containerCfg.port!=null then [ "${toString containerCfg.pubPort}:${toString containerCfg.port}" ] else [];
--- a/modules/server/containers/defs/traefik.nix
+++ b/modules/server/containers/defs/traefik.nix
@@ -17,7 +17,6 @@ in {
    server = builder.mkContainer {
      subdomain = containerCfg.subdomain;
      image = "traefik:${version}";
-      port = containerCfg.port;
      ip = containerCfg.ip;
      secret = name;
      extraEnv = {