nix volumes RO

2022-11-16 00:12:14 +01:00 · 2022-11-16 00:12:14 +01:00 · 7df8162913
commit 7df8162913
parent 2cd4bf1ee7
1 changed files with 2 additions and 0 deletions
--- a/cluster/staging/app/dummy/deploy/dummy-nginx.hcl
+++ b/cluster/staging/app/dummy/deploy/dummy-nginx.hcl
@ -37,10 +37,12 @@ job "dummy-nginx" {

      volume_mount {
        volume      = "nix-store"
+        read_only = true
        destination = "/nix"
      }
      volume_mount {
        volume      = "nix-current-system-bin"
+        read_only = true
        destination = "/run/current-system/sw/bin"
      }