aboutsummaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorAlex Auvolat <alex@adnab.me>2022-11-16 00:12:14 +0100
committerAlex Auvolat <alex@adnab.me>2022-11-16 00:12:14 +0100
commit7df8162913a908c0c8714a7736ecd2e2aa451467 (patch)
tree57a64806ca7fe997800b999f74feb045cb462b83
parent2cd4bf1ee79b72881fe2f1d8a1160a390c7d837a (diff)
downloadnixcfg-7df8162913a908c0c8714a7736ecd2e2aa451467.tar.gz
nixcfg-7df8162913a908c0c8714a7736ecd2e2aa451467.zip
nix volumes RO
-rw-r--r--cluster/staging/app/dummy/deploy/dummy-nginx.hcl2
1 files changed, 2 insertions, 0 deletions
diff --git a/cluster/staging/app/dummy/deploy/dummy-nginx.hcl b/cluster/staging/app/dummy/deploy/dummy-nginx.hcl
index cf9ec94..5f3d5f6 100644
--- a/cluster/staging/app/dummy/deploy/dummy-nginx.hcl
+++ b/cluster/staging/app/dummy/deploy/dummy-nginx.hcl
@@ -37,10 +37,12 @@ job "dummy-nginx" {
volume_mount {
volume = "nix-store"
+ read_only = true
destination = "/nix"
}
volume_mount {
volume = "nix-current-system-bin"
+ read_only = true
destination = "/run/current-system/sw/bin"
}