bind mount

1 files changed, 22 insertions, 1 deletions

diff --git a/hel.nix b/hel.nix
index 759441f7..bc2d520f 100644
--- a/hel.nix
+++ b/hel.nix
@@ -109,7 +109,7 @@
           AllowStreamLocalForwarding no
           X11Forwarding no
           AllowAgentForwarding no
-          ChrootDirectory %h
+          ChrootDirectory /run/%u
           AuthorizedKeysFile /etc/ssh/authorized_keys.d/%u
       '';
     };
@@ -353,5 +353,26 @@
   virtualisation.virtualbox.host = {
     enable = true;
   };
+
+  systemd.automounts = [
+    { enable = true;
+      where = "/run/media";
+      automountConfig = {
+        DirectoryMode = "700";
+      };
+    }
+  ];
+
+  systemd.mounts = [
+    { enable = true;
+      where = "/run/media";
+      what = "/var/media";
+      type = "none";
+      options = "bind";
+      mountConfig = {
+        DirectoryMode = "700";
+      };
+    }
+  ];
 }