Moving to bind mounts and docker secrets.

This commit is contained in:
2025-08-31 09:01:44 -07:00
parent ba997b3a9d
commit 0bf2a34edd
4 changed files with 76 additions and 25 deletions

14
cl.yaml
View File

@@ -5,14 +5,16 @@ passwd:
- name: core
ssh_authorized_keys_local:
- /ssh-keys
- name: nextcloud
uid: 1001
systemd:
units:
- name: var-lib-docker-volumes.mount
- name: nassella.mount
enabled: true
contents: |
[Mount]
What=/dev/disk/by-partlabel/appstorage
Where=/var/lib/docker/volumes
Where=/nassella
Type=ext4
[Install]
@@ -29,8 +31,8 @@ systemd:
- name: 10-wait-docker.conf
contents: |
[Unit]
After=var-lib-docker-volumes.mount
Requires=var-lib-docker-volumes.mount
After=nassella.mount
Requires=nassella.mount
- name: systemd-sysupdate.service
dropins:
- name: docker-compose.conf
@@ -44,7 +46,11 @@ systemd:
# device: /dev/disk/by-label/appstorage
storage:
disks:
# TODO I think this can be changed back to
# device: /dev/disk/by-label/appstorage
# I think it didn't work before becase the partition number was 0 (now correctly set to 1)
- device: /dev/sda
# - device: /dev/disk/by-label/appstorage
wipe_table: false
partitions:
- label: appstorage