Added Impermanence to services runned by cyper-controller

2026-06-28 15:02:42 +02:00
parent bbf95a5a8c
commit a292eb6b09
15 changed files with 205 additions and 25 deletions
@@ -5,6 +5,15 @@ let
  certDir = "/var/lib/kanidm/tls";
 in
 {
+  environment.persistence."/persist".directories = [
+    {
+      directory = "/var/lib/kanidm";
+      user = "kanidm";
+      group = "kanidm";
+      mode = "0750";
+    }
+  ];
+
  systemd.services.kanidm-selfsigned-cert = {
    description = "Generate self-signed TLS certificate for Kanidm";
    wantedBy = [ "kanidm.service" ];