nixpkgs/nixos
Martin Weinelt 3086313e4c
nixos/frigate: fix recording and serving of clips/recordings
Frigate does string prefix matching for paths, which isn't exactly
compatible with dynamically provisioned directories of systemd, where
/var/cache/frigate is actually a symlink to /var/cache/private/frigate.

Because we are unlikely to get this fixed upstream, this is one of the
reason we should stop using DynamicUser= here.

The other being, that nginx needs to be able to serve clips and
recordings from both the CacheDirectory and the StateDirectory, and
nginx being a member on a group that may only exist after it was started
up doesn't work reliably.

This is also why we relax the umask to allow g+r/g+rx for newly created
files. Existing installs may need the following permissions fix to get
things going.

```
find /var/lib/frigate/recordings -type d -exec chmod g+rx {} \;
find /var/lib/frigate/recordings -type f -exec chmod g+r {} \;
find /var/cache/frigate -type f -exec chmod g+r {} \;
```

Co-Authored-By: Daniel Barlow <dan@telent.net>
2023-07-27 18:36:25 +02:00
..
doc/manual Merge pull request #243062 from mobusoperandi/doc_watchexec 2023-07-27 16:11:18 +02:00
lib nixos/lib: systemd definition files function 2023-07-26 23:30:08 +02:00
maintainers nixos/amazon-image: embiggen 2023-06-07 08:42:47 +03:00
modules nixos/frigate: fix recording and serving of clips/recordings 2023-07-27 18:36:25 +02:00
tests nixos/tests/appliance-repart-image: init 2023-07-26 23:33:33 +02:00
COPYING
default.nix
README
release-combined.nix
release-small.nix
release.nix

*** NixOS ***

NixOS is a Linux distribution based on the purely functional package
management system Nix.  More information can be found at
https://nixos.org/nixos and in the manual in doc/manual.