Add ro bind mounts for CA certificates

2025-10-06 16:53:34 +02:00 · 2025-10-06 16:53:34 +02:00 · 50dedefe79
commit 50dedefe79
parent 6cd80f64f5
1 changed files with 4 additions and 1 deletions
--- a/hosts/iron/services/jellyfin.nix
+++ b/hosts/iron/services/jellyfin.nix
@ -14,9 +14,12 @@ in
        "/var/lib/jellyfin"
      ];
      BindReadOnlyPaths = [
-        "/nix/store"
+        "/etc/resolv.conf"
+        "/etc/ssl"
+        "/etc/static/ssl"
        "/filebitch/pub/Filme"
        "/filebitch/pub/Serien"
+        "/nix/store"
        "/var/lib/qBittorrent/downloads"
      ];
      CapabilityBoundingSet = "";