diff options
| author | Alex Auvolat <alex@adnab.me> | 2022-11-16 00:12:14 +0100 |
|---|---|---|
| committer | Alex Auvolat <alex@adnab.me> | 2022-11-16 00:12:14 +0100 |
| commit | 7df8162913a908c0c8714a7736ecd2e2aa451467 (patch) | |
| tree | 57a64806ca7fe997800b999f74feb045cb462b83 /cluster | |
| parent | 2cd4bf1ee79b72881fe2f1d8a1160a390c7d837a (diff) | |
| download | nixcfg-7df8162913a908c0c8714a7736ecd2e2aa451467.tar.gz nixcfg-7df8162913a908c0c8714a7736ecd2e2aa451467.zip | |
nix volumes RO
Diffstat (limited to 'cluster')
| -rw-r--r-- | cluster/staging/app/dummy/deploy/dummy-nginx.hcl | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/cluster/staging/app/dummy/deploy/dummy-nginx.hcl b/cluster/staging/app/dummy/deploy/dummy-nginx.hcl index cf9ec94..5f3d5f6 100644 --- a/cluster/staging/app/dummy/deploy/dummy-nginx.hcl +++ b/cluster/staging/app/dummy/deploy/dummy-nginx.hcl @@ -37,10 +37,12 @@ job "dummy-nginx" { volume_mount { volume = "nix-store" + read_only = true destination = "/nix" } volume_mount { volume = "nix-current-system-bin" + read_only = true destination = "/run/current-system/sw/bin" } |