nixos/photoprism: disallow passwords in store

2025-10-01 23:13:46 +02:00
parent 771a0ec704
commit 4a14d1e05d
1 changed files with 12 additions and 2 deletions
@@ -33,7 +33,12 @@ in
    enable = lib.mkEnableOption "Photoprism web server";

    passwordFile = lib.mkOption {
-      type = lib.types.nullOr lib.types.path;
+      type = lib.types.nullOr (
+        lib.types.pathWith {
+          inStore = false;
+          absolute = true;
+        }
+      );
      default = null;
      description = ''
        Admin password file.
@@ -41,7 +46,12 @@ in
    };

    databasePasswordFile = lib.mkOption {
-      type = lib.types.nullOr lib.types.path;
+      type = lib.types.nullOr (
+        lib.types.pathWith {
+          inStore = false;
+          absolute = true;
+        }
+      );
      default = null;
      description = ''
        Database password file.