fix(tazjin/koptevo): add hard dependency from gonic on geesefs

Change-Id: Id4c8346a4bc15e7e7da7188679f54ec1e054cf53
Reviewed-on: https://cl.tvl.fyi/c/depot/+/11028
Autosubmit: tazjin <tazjin@tvl.su>
Reviewed-by: tazjin <tazjin@tvl.su>
Tested-by: BuildkiteCI
This commit is contained in:
Vincent Ambo 2024-02-26 14:28:52 +03:00 committed by clbot
parent 0df5049e98
commit db2fbcac0b

View file

@ -147,11 +147,14 @@ in
};
# hack to work around the strict sandboxing of the gonic module
# breaking DNS resolutino
# breaking DNS resolution
systemd.services.gonic.serviceConfig.BindReadOnlyPaths = [
"-/etc/resolv.conf"
];
# add a hard dependency on the FUSE mount
systemd.services.gonic.requires = [ "geesefs.service" ];
services.nginx.virtualHosts."music.tazj.in" = {
addSSL = true;
enableACME = true;