fix tmpfs

2026-05-08 21:05:08 +02:00
parent 5de459c347
commit aacca16eb2
2 changed files with 1 additions and 2 deletions
--- a/modules/server/containers/defs/nextcloud.nix
+++ b/modules/server/containers/defs/nextcloud.nix
@@ -44,7 +44,7 @@ in {
        "traefik.http.middlewares.sts_headers.headers.stsIncludeSubdomains" = "true";
      };
      extraOptions = [
-        "--tmpfs /tmp:rw,mode=1777"
+        "--tmpfs=/tmp:rw,noexec,nosuid,size=64m"
      ];
      overrides = {
        ports = if containerCfg.pubPort!=null && containerCfg.port!=null then [ "${toString containerCfg.pubPort}:${toString containerCfg.port}" ] else [];