zuckerberg/nix-config
1
0
Fork 0
Code Issues Pull Requests Actions Activity

Fix memos failing to open SQLite database on ZFS
Some checks failed
Check Flake / check-flake (push) Failing after 18s
Details

Browse Source 
ProtectSystem=strict with ReadWritePaths fails silently on ZFS submounts
(/var/lib is a separate dataset), leaving the data dir read-only. Downgrade
to ProtectSystem=full which leaves /var writable while still protecting
/usr and /boot.
This commit is contained in:
Zuckerberg
2026-03-01 17:54:11 -08:00
parent 000bbd7f4d
commit 43ec75741d
1 changed files with 2 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
machines/storage/s0/default.nix
View File

@@ -341,6 +341,8 @@
enable = true; enable = true;
settings.MEMOS_PORT = "57643"; settings.MEMOS_PORT = "57643";
}; };
# ReadWritePaths doesn't work with ProtectSystem=strict on ZFS submounts (/var/lib is a separate dataset)
systemd.services.memos.serviceConfig.ProtectSystem = lib.mkForce "full";
services.outline = { services.outline = {
enable = true; enable = true;