infra/nix/hosts/loki/modules/cifs.nix
2026-01-05 23:09:19 +01:00

41 lines
1.3 KiB
Nix

{
config,
pkgs,
...
}:
{
# config.sops.secrets.smb-caelum-video = {};
sops.secrets.smb-pure-joy-media-ro = { };
environment.systemPackages = [ pkgs.cifs-utils ];
fileSystems."/mnt/pure-joy-media" = {
device = "//pure-joy.${domain}/media-ro";
fsType = "cifs";
options =
let
# this line prevents hanging on network split
# automount_opts = "sec=none,x-systemd.automount,noauto,x-systemd.idle-timeout=60,x-systemd.device-timeout=5s,x-systemd.mount-timeout=5s,uid=65534,gid=65534";
# automount_opts = "sec=none,x-systemd.automount,noauto,x-systemd.idle-timeout=60,x-systemd.device-timeout=5s,x-systemd.mount-timeout=5s,uid=${toString config.users.users.nobody.uid},gid=${toString config.users.groups.nobody.gid}";
automount_opts = [
"x-systemd.automount"
"noauto"
"x-systemd.idle-timeout=60"
"x-systemd.device-timeout=5s"
"x-systemd.mount-timeout=5s"
"noexec"
"nosuid"
# "unix"
"iocharset=utf8"
# "uid=0"
# "gid=0"
# "uid=65534"
# "gid=65534"
# "forceuid"
# "forcegid"
"rw"
];
in
automount_opts ++ [ "credentials=${config.sops.secrets.smb-pure-joy-media-ro.path}" ];
# in ["${automount_opts}"];
};
}