rope/nixos
1
1
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Harden deployment, authentication, firewall and media storage failure paths

Browse source
This commit is contained in:
rope 2026-09-14 11:50:22 +01:00
parent 64ede7bd05
commit 7145a35927
35 changed files with 2529 additions and 499 deletions
Download patch file Download diff file Expand all files Collapse all files

7
hosts/hardware/FredOS-Mediaserver.nix
View file

@ -28,24 +28,31 @@
fileSystems."/mnt/disk1" = {
device = "/dev/disk/by-uuid/90ae3493-38c1-4473-b409-e9d99c3b315e";
fsType = "ext4";
options = [ "nofail" "x-systemd.device-timeout=15s" ];
};
fileSystems."/mnt/disk2" = {
device = "/dev/disk/by-uuid/58cecfd5-2fd7-4c4b-b3a1-0bf5e9d0beab";
fsType = "ext4";
options = [ "nofail" "x-systemd.device-timeout=15s" ];
};
fileSystems."/mnt/disk3" = {
device = "/dev/disk/by-uuid/317660ef-bd75-4fa4-bd20-f96a3926bf7b";
fsType = "ext4";
options = [ "nofail" "x-systemd.device-timeout=15s" ];
};
# Combined MergerFS pool
fileSystems."/mnt/storage" = {
device = "/mnt/disk1:/mnt/disk2:/mnt/disk3";
fsType = "fuse.mergerfs";
# The router may boot without media, but the pool must never start on
# bare branch directories or present a silently incomplete library.
depends = [ "/mnt/disk1" "/mnt/disk2" "/mnt/disk3" ];
options = [
"defaults"
"nofail"
"allow_other"
"use_ino"
"cache.files=partial"