rope/nixos
1
1
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Fix CrowdSec race: order crowdsec after tmpfiles-resetup

Browse source 
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
This commit is contained in:
ediblerope 2026-04-05 23:17:35 +01:00
parent 9958198209
commit 8b85956f7c
1 changed files with 3 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

3
services/crowdsec.nix
View file

@ -31,6 +31,9 @@
"L+ /etc/crowdsec/config.yaml - - - - ${(pkgs.formats.yaml { }).generate "crowdsec.yaml" config.services.crowdsec.settings.general}"
];
# Ensure /var/lib/crowdsec exists before crowdsec starts (race with tmpfiles-resetup)
systemd.services.crowdsec.after = [ "systemd-tmpfiles-resetup.service" ];
# Firewall bouncer — auto-registers to local CrowdSec LAPI
services.crowdsec-firewall-bouncer = {
enable = true;