nixos/kanidm: add home_mount_prefix to BindPaths if set (#382915)

2025-02-18 09:06:56 -05:00
parent cc594f99bf 2f45486c6c
commit 223499992b
1 changed files with 10 additions and 6 deletions
@@ -855,12 +855,16 @@ in
          User = "kanidm";
          Group = "kanidm";

-          BindPaths = [
-            # To create the socket
-            "/run/kanidmd:/run/kanidmd"
-            # To store backups
-            cfg.serverSettings.online_backup.path
-          ];
+          BindPaths =
+            [
+              # To create the socket
+              "/run/kanidmd:/run/kanidmd"
+              # To store backups
+              cfg.serverSettings.online_backup.path
+            ]
+            ++ optional (
+              cfg.enablePam && cfg.unixSettings ? home_mount_prefix
+            ) cfg.unixSettings.home_mount_prefix;

          AmbientCapabilities = [ "CAP_NET_BIND_SERVICE" ];
          CapabilityBoundingSet = [ "CAP_NET_BIND_SERVICE" ];