lukegb/depot
1
0
Fork 0
Code Issues 1 Pull requests Projects Packages Activity Actions

pomerium: use /var/lib/pomerium for autocert state

Browse source
This commit is contained in:
Luke Granger-Brown 2020-12-28 17:12:06 +00:00
parent 8ed1d0665e
commit 8956bc3207
1 changed files with 3 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

3
nix/pkgs/pomerium/module.nix
View file

@ -30,9 +30,12 @@ with lib;
after = [ "network.target" ]; after = [ "network.target" ];
wantedBy = [ "multi-user.target" ]; wantedBy = [ "multi-user.target" ];
Environment.AUTOCERT_DIR = "/var/lib/pomerium/autocert";
serviceConfig = { serviceConfig = {
DynamicUser = true; DynamicUser = true;
ExecStart = pkgs.writeShellScript "run-pomerium" '' ExecStart = pkgs.writeShellScript "run-pomerium" ''
mkdir -p "$AUTOCERT_DIR"
if [[ -v CREDENTIALS_DIRECTORY ]]; then if [[ -v CREDENTIALS_DIRECTORY ]]; then
cd "$CREDENTIALS_DIRECTORY" cd "$CREDENTIALS_DIRECTORY"
fi fi