fix: remove unnecessary sudo rules and adjust permissions for container directories

Co-authored-by: Copilot <copilot@github.com>
This commit is contained in:
Jakub Dorfman 2026-04-28 23:09:25 +02:00
parent fe4d3f4432
commit eeab4c1818
3 changed files with 4 additions and 20 deletions

View file

@ -11,14 +11,14 @@
users.users.caddy.extraGroups = [ "panelroutes" ];
systemd.tmpfiles.rules = [
"d /var/lib/containers 0755 reudy panelroutes -"
"d /var/lib/containers 0750 reudy panelroutes -"
"d /var/lib/containers/stacks 0750 reudy panelroutes -"
"d /var/lib/containers/volumes 0750 reudy panelroutes -"
"d /var/lib/containers/routes 0755 reudy panelroutes -"
"d /var/lib/containers/routes 0750 reudy panelroutes -"
"d /var/lib/containers/state 0750 reudy panelroutes -"
"d /var/lib/containers/state/apps 0750 reudy panelroutes -"
"d /var/lib/containers/backups 0750 reudy panelroutes -"
"f /var/lib/containers/routes/routes.caddy 0664 reudy panelroutes -"
"f /var/lib/containers/routes/routes.caddy 0640 reudy panelroutes -"
];
systemd.services.panel-api = {
@ -29,7 +29,6 @@
pkgs.podman
pkgs.podman-compose
pkgs.curl
pkgs.sudo
pkgs.coreutils
pkgs.zip
pkgs.unzip
@ -41,7 +40,7 @@
Group = "panelroutes";
Restart = "always";
RestartSec = 3;
WorkingDirectory = "/home/reudy";
WorkingDirectory = "/var/lib/containers";
ExecStart = "${pkgs.python3}/bin/python3 ${./panel/panel-api.py}";
};