privatevoid.net/depot
1
1
Fork 0
Code Issues 25 Pull requests 2 Projects 3 Releases Packages Wiki Activity Actions

cluster/services/ipfs: stop using pnet

Browse source
This commit is contained in:
Max Headroom 2022-11-13 00:35:00 +01:00
parent 93826ae522
commit 524a2560be
1 changed files with 0 additions and 9 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

9
cluster/services/ipfs/node.nix
View file

@ -12,13 +12,6 @@ in
aspect.modules.ipfs aspect.modules.ipfs
]; ];
age.secrets.ipfs-swarm-key = {
file = ../../../secrets/ipfs-swarm-key.age;
mode = "0400";
owner = cfg.user;
inherit (cfg) group;
};
links.ipfsGateway.protocol = "http"; links.ipfsGateway.protocol = "http";
networking.firewall = { networking.firewall = {
@ -85,12 +78,10 @@ in
systemd.tmpfiles.rules = [ systemd.tmpfiles.rules = [
"d '/run/ipfs' 0750 ${cfg.user} ${cfg.group} - -" "d '/run/ipfs' 0750 ${cfg.user} ${cfg.group} - -"
"L+ '${cfg.dataDir}/swarm.key' - - - - ${config.age.secrets.ipfs-swarm-key.path}"
]; ];
systemd.services.ipfs = { systemd.services.ipfs = {
environment.LIBP2P_FORCE_PNET = "1";
serviceConfig = { serviceConfig = {
Slice = "remotefshost.slice"; Slice = "remotefshost.slice";
AmbientCapabilities = [ "CAP_NET_BIND_SERVICE" ]; AmbientCapabilities = [ "CAP_NET_BIND_SERVICE" ];