From afac3e55484a5da0ea0d87cfcdc3c5d4fd557832 Mon Sep 17 00:00:00 2001 From: Jordan Holt Date: Tue, 30 May 2023 22:00:15 +0100 Subject: [PATCH] Make library mount readonly in jellyfin --- hosts/library/default.nix | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/hosts/library/default.nix b/hosts/library/default.nix index 6d98d56..b4f122d 100644 --- a/hosts/library/default.nix +++ b/hosts/library/default.nix @@ -70,6 +70,7 @@ with lib.my; enable = true; extraPackages = [ pkgs.zfs ]; }; + virtualisation.containers.storage.settings = { storage = { driver = "zfs"; @@ -77,6 +78,7 @@ with lib.my; runroot = "/run/containers/storage"; }; }; + virtualisation.oci-containers.containers = { jellyfin = { image = "docker.io/jellyfin/jellyfin:10.8.10"; @@ -91,7 +93,7 @@ with lib.my; "--privileged" "--label=io.containers.autoupdate=registry" "--group-add=989" - "--mount=type=bind,source=/mnt/library,target=/library,ro=true" + "--mount=type=bind,source=/mnt/library,target=/library,ro" "--device=/dev/dri:/dev/dri" ]; };