From cf63e2c3ad3b0a780b7a595c9e34de3559808834 Mon Sep 17 00:00:00 2001
From: lassulus <lassulus@lassul.us>
Date: Sun, 24 Jan 2021 16:58:22 +0100
Subject: sync-containers: allow syncthing to enter /var/lib/containers

---
 krebs/3modules/sync-containers.nix | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/krebs/3modules/sync-containers.nix b/krebs/3modules/sync-containers.nix
index 7c7db4c3d..d31022d3a 100644
--- a/krebs/3modules/sync-containers.nix
+++ b/krebs/3modules/sync-containers.nix
@@ -92,6 +92,10 @@ in {
 
   config = mkIf (cfg.containers != {}) {
     programs.fuse.userAllowOther = true;
+    # allow syncthing to enter /var/lib/containers
+    system.activationScripts.syncthing-home = ''
+      ${pkgs.coreutils}/bin/chmod a+x /var/lib/containers
+    '';
 
     services.syncthing.declarative.folders = (mapAttrs' (_: ctr: nameValuePair "${(paths ctr.name).${ctr.format}}" ({
       devices = ctr.peers;
-- 
cgit v1.2.3