Mail : Make acme read-only.

This commit is contained in:
Dmitry Voronin 2024-06-18 11:10:03 +03:00
parent ea9d9495e5
commit c0d12ae542
Signed by: voronind
SSH key fingerprint: SHA256:3kBb4iV2ahufEBNq+vFbUe4QYfHt98DHQjN7QaptY9k
2 changed files with 2 additions and 1 deletions

View file

@ -45,7 +45,7 @@ in {
}; };
"/acme" = { "/acme" = {
hostPath = "${container.config.proxy.storage}/letsencrypt"; hostPath = "${container.config.proxy.storage}/letsencrypt";
isReadOnly = false; isReadOnly = true;
}; };
}; };

View file

@ -69,6 +69,7 @@ in {
internalInterfaces = [ "ve-+" ]; internalInterfaces = [ "ve-+" ];
inherit (args) externalInterface; inherit (args) externalInterface;
# TODO: Do I even need this?
forwardPorts = with args.container.config; [ forwardPorts = with args.container.config; [
# Dns Server. # Dns Server.
{ {