This repository has no description
2configs.services.flix.ipfs: allow ipfs-upload to write into games/
Adjusts /var/download/games to ipfs:users mode 2775 so the upload
service (running as ipfs) can write into it while lass keeps write via
the users group. systemd-tmpfiles refuses to bootstrap this transition
when child and parent have different owners, so the first chown was
done out-of-band; this `z` rule keeps the perms from drifting.
Also drops the non-existent `download` group from the staging dir
tmpfiles entries (download group only exists on the yellow container,
not on the host).
Assisted-by: Claude Code (claude-opus-4-7)
author
lassulus
date
(May 24, 2026, 7:37 PM CEST)
commit
81d2bf4c
81d2bf4cf1ffd44e289a7ccc587e14a0d21befa3
parent
ac9fc7f6
ac9fc7f6cab3e186c93f32a7a30948899ce7b2fd
+7
-2
+7
-2
2configs/services/flix/ipfs.nix
+7
-2
2configs/services/flix/ipfs.nix
···
278
278
# Staging area for ipfs-upload: same filesystem as the destination, but
279
279
# outside the pin-watcher's watch dirs (movies/shows/games) so inotify
280
280
# never fires on in-flight uploads.
281
-
"d /var/download/incoming 0775 ${config.services.kubo.user} download -"
282
-
"d /var/download/incoming/uploader 0775 ${config.services.kubo.user} download -"
281
+
"d /var/download/incoming 0755 ${config.services.kubo.user} ${config.services.kubo.group} -"
282
+
"d /var/download/incoming/uploader 0755 ${config.services.kubo.user} ${config.services.kubo.group} -"
283
+
# Let the ipfs-upload service write into /var/download/games. Owner
284
+
# = ipfs so the service has write; group = users + setgid so existing
285
+
# CLI users (lass) keep write via group and new uploads inherit
286
+
# group=users.
287
+
"z /var/download/games 2775 ${config.services.kubo.user} users -"
283
288
];
284
289
285
290
services.kubo = {