hosts/{kuro,shiro}: harden storage/backup mounts
Removing unneeded privileges from backup mounts. Also adds noatime to nfs mounts for slight improvement in throughput.
This commit is contained in:
		
							parent
							
								
									1ea4dea1d1
								
							
						
					
					
						commit
						3f72e498d6
					
				|  | @ -75,12 +75,18 @@ | |||
|     "/usr/drive" = { | ||||
|       device = "kiiro:/volume1/homes/hlissner/Drive"; | ||||
|       fsType = "nfs"; | ||||
|       options = [ "nofail" "noauto" "x-systemd.automount" "x-systemd.idle-timeout=5min" ]; | ||||
|       options = [ | ||||
|         "nofail" "noauto" "noatime" "x-systemd.automount" "x-systemd.idle-timeout=5min" | ||||
|         "nodev" "nosuid" "noexec" | ||||
|       ]; | ||||
|     }; | ||||
|     "/usr/store" = { | ||||
|       device = "/dev/disk/by-label/store"; | ||||
|       fsType = "ext4"; | ||||
|       options = [ "noauto" "noatime" "x-systemd.automount" "x-systemd.idle-timeout=5min" ]; | ||||
|       options = [ | ||||
|         "noauto" "noatime" "x-systemd.automount" "x-systemd.idle-timeout=5min" | ||||
|         "nodev" "nosuid" "noexec" | ||||
|       ]; | ||||
|     }; | ||||
|   }; | ||||
|   swapDevices = []; | ||||
|  |  | |||
|  | @ -63,7 +63,10 @@ | |||
|     "/usr/drive" = { | ||||
|       device = "kiiro:/volume1/homes/hlissner/Drive"; | ||||
|       fsType = "nfs"; | ||||
|       options = [ "nofail" "noauto" "x-systemd.automount" ]; | ||||
|       options = [ | ||||
|         "nofail" "noauto" "noatime" "x-systemd.automount" | ||||
|         "nodev" "nosuid" "noexec" | ||||
|       ]; | ||||
|     }; | ||||
|   }; | ||||
|   swapDevices = [ { device = "/dev/disk/by-label/swap"; }]; | ||||
|  |  | |||
		Loading…
	
		Reference in a new issue