Faris/nixos
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

fix(caddy-local,mongo): token bind-mount + correct WT flag name #9

Merged
Faris merged 1 commit from fix/caddy-local-token-mount into main 2026-10-02 21:02:51 +01:00
Conversation 0 Commits 1 Files changed 3 +9 -6
Faris commented 2026-10-02 21:00:49 +01:00
Owner
Copy link

Two findings from the live cutover:

  1. caddy-local inside the nspawn failed to start: nspawns don't see the host's /pool, and only /data was bound — so EnvironmentFile=/pool/services/secrets/caddy-local-acme pointed at nothing inside the container. The token file is now bind-mounted ro at /etc/caddy/caddy-local-acme and the unit reads it there. Confirmed by caddy validate --adapter caddyfile: same rendered config validates with the token and fails on the cloudflare provider without it.

  2. librechat-mongo start-limit-hit: typo — mongod's flag is --wiredTigerCacheSizeGB, not --wiredTigerCacheSizeG (typo had also propagated into the AGENTS gotcha; fixed there too).

Merge and the next timer run converges; expect ~30s of mongo initdb before librechat connects.

Two findings from the live cutover: 1. **caddy-local inside the nspawn failed to start**: nspawns don't see the host's `/pool`, and only `/data` was bound — so `EnvironmentFile=/pool/services/secrets/caddy-local-acme` pointed at nothing inside the container. The token file is now bind-mounted ro at `/etc/caddy/caddy-local-acme` and the unit reads it there. Confirmed by `caddy validate --adapter caddyfile`: same rendered config validates **with** the token and fails on the cloudflare provider without it. 2. **librechat-mongo start-limit-hit**: typo — mongod's flag is `--wiredTigerCacheSizeGB`, not `--wiredTigerCacheSizeG` (typo had also propagated into the AGENTS gotcha; fixed there too). Merge and the next timer run converges; expect ~30s of mongo initdb before librechat connects.
fix(caddy-local,mongo): token bind-mount + correct WT flag name
All checks were successful
eval / eval (pull_request) Successful in 22s
Details
2b4aac7a7b 
Two deploy findings: nspawns don't see /pool, so the ACME token file
binds to /etc/caddy/caddy-local-acme and the unit reads it there (caddy
inside failed to start without it); mongod's flag is --wiredTigerCacheSizeGB,
not ...SizeG (mongo container start-limit-hit on the typo).
Faris merged commit c82365d533 into main 2026-10-02 21:02:51 +01:00
Faris deleted branch fix/caddy-local-token-mount 2026-10-02 21:02:51 +01:00
Sign in to join this conversation.
Reviewers
No reviewers
Labels
Clear labels
No items
No labels
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
Faris/nixos!9
No description provided.