general: disable passthrough chmod for fuse.bindfs mounts

xddxdd · Mar 4, 2024 · 36b5a88 · 36b5a88
1 parent 5582a23
commit 36b5a88
Show file tree

Hide file tree

Showing 4 changed files with 11 additions and 5 deletions.
diff --git a/hosts/lt-home-vm/shares.nix b/hosts/lt-home-vm/shares.nix
@@ -42,6 +42,7 @@
         "perms=700"
         "create-for-user=lantian"
         "create-for-group=users"
+        "chmod-ignore"
         "chown-ignore"
         "chgrp-ignore"
         "xattr-none"

diff --git a/nixos/optional-apps/palworld.nix b/nixos/optional-apps/palworld.nix
@@ -100,11 +100,13 @@ in {
         ${pkgs.palworld-exporter}/bin/palworld_exporter
       '';
 
-      serviceConfig = LT.serviceHarden // {
-        User = "palworld";
-        Group = "palworld";
-        Restart = "on-failure";
-      };
+      serviceConfig =
+        LT.serviceHarden
+        // {
+          User = "palworld";
+          Group = "palworld";
+          Restart = "on-failure";
+        };
     };
 
     systemd.services.palworld-backup = {
@@ -154,6 +156,7 @@ in {
           "perms=700"
           "create-for-user=root"
           "create-for-group=root"
+          "chmod-ignore"
           "chown-ignore"
           "chgrp-ignore"
           "xattr-none"

diff --git a/nixos/optional-apps/resilio.nix b/nixos/optional-apps/resilio.nix
@@ -55,6 +55,7 @@ in {
         "perms=700"
         "create-for-user=root"
         "create-for-group=root"
+        "chmod-ignore"
         "chown-ignore"
         "chgrp-ignore"
         "xattr-none"

diff --git a/nixos/optional-apps/syncthing.nix b/nixos/optional-apps/syncthing.nix
@@ -23,6 +23,7 @@
         "perms=700"
         "create-for-user=root"
         "create-for-group=root"
+        "chmod-ignore"
         "chown-ignore"
         "chgrp-ignore"
         "xattr-none"