aynish/helm
1
0
Fork 0
Code Pull requests Packages Projects Releases Activity

hosts/{kuro,shiro}: harden storage/backup mounts

Browse source 
Removing unneeded privileges from backup mounts.

Also adds noatime to nfs mounts for slight improvement in throughput.
This commit is contained in:
Henrik Lissner 2021-02-20 17:53:57 -05:00
parent 1ea4dea1d1
commit 3f72e498d6
2 changed files with 12 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

10
hosts/kuro/hardware-configuration.nix
View file

@ -75,12 +75,18 @@
"/usr/drive" = { "/usr/drive" = {
device = "kiiro:/volume1/homes/hlissner/Drive"; device = "kiiro:/volume1/homes/hlissner/Drive";
fsType = "nfs"; fsType = "nfs";
options = [ "nofail" "noauto" "x-systemd.automount" "x-systemd.idle-timeout=5min" ]; options = [
"nofail" "noauto" "noatime" "x-systemd.automount" "x-systemd.idle-timeout=5min"
"nodev" "nosuid" "noexec"
];
}; };
"/usr/store" = { "/usr/store" = {
device = "/dev/disk/by-label/store"; device = "/dev/disk/by-label/store";
fsType = "ext4"; fsType = "ext4";
options = [ "noauto" "noatime" "x-systemd.automount" "x-systemd.idle-timeout=5min" ]; options = [
"noauto" "noatime" "x-systemd.automount" "x-systemd.idle-timeout=5min"
"nodev" "nosuid" "noexec"
];
}; };
}; };
swapDevices = []; swapDevices = [];

5
hosts/shiro/hardware-configuration.nix
View file

@ -63,7 +63,10 @@
"/usr/drive" = { "/usr/drive" = {
device = "kiiro:/volume1/homes/hlissner/Drive"; device = "kiiro:/volume1/homes/hlissner/Drive";
fsType = "nfs"; fsType = "nfs";
options = [ "nofail" "noauto" "x-systemd.automount" ]; options = [
"nofail" "noauto" "noatime" "x-systemd.automount"
"nodev" "nosuid" "noexec"
];
}; };
}; };
swapDevices = [ { device = "/dev/disk/by-label/swap"; }]; swapDevices = [ { device = "/dev/disk/by-label/swap"; }];