hosts/aubergine/sftp.nix

   1 { pkgs, lib, ... }:
   2 let
   3   sftpRoot = "/var/lib/sftp";
   4 in
   5 {
   6   systemd.mounts = [
   7     {
   8       where = "${sftpRoot}/films";
   9       type = "none";
  10       what = "/mnt/off3/julm/public/podcasts/films";
  11       options = "bind,rw,noauto";
  12       requires = [ "zfs-import@off3.service" ];
  13       after = [
  14         "zfs-import@off3.service"
  15         "zfs-mount.service"
  16         "var-lib-sftp.mount"
  17         "mnt-off3-julm-public-podcasts.mount"
  18       ];
  19       #bindsTo = [ "mnt-off3-julm-public-podcasts.mount" ];
  20       unitConfig = {
  21         #AssertDirectoryNotEmpty = "/mnt/off3/julm/public/podcasts/films";
  22       };
  23     }
  24   ];
  25   systemd.automounts = [
  26     {
  27       where = "${sftpRoot}/films";
  28       wantedBy = [ "zfs-mount.service" ];
  29       after = [
  30         "zfs-mount.service"
  31         "var-lib-sftp.mount"
  32       ];
  33       #automountConfig.TimeoutIdleSec = "5 min";
  34     }
  35   ];
  36   #fileSystems."${sftpRoot}/camera" = {
  37   #  device = "/mnt/off2/julm/perso/camera";
  38   #  options = [ "bind" "ro" "noauto" ];
  39   #};
  40   services.openssh.extraConfig = ''
  41     Match User sevy
  42       AllowAgentForwarding no
  43       AllowTcpForwarding no
  44       ChrootDirectory ${sftpRoot}
  45       ForceCommand internal-sftp -u 0002
  46       X11Forwarding no
  47   '';
  48 }