fix(2): set time.timeZone=UTC on cc-ci → create /etc/localtime (immich bind-mount)

immich's compose bind-mounts the host /etc/localtime into the app container; NixOS without a set
timezone leaves /etc/localtime absent → 'bind source path does not exist: /etc/localtime' → app
service rejected (never converges). time.timeZone=UTC creates /etc/localtime (UTC = deterministic CI
timestamps). Nix-declared, reversible; helps any recipe binding /etc/localtime.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
This commit is contained in:
2026-05-29 14:51:33 +01:00
parent b0f1e0b0ad
commit d4eae4ee49

View File

@ -21,6 +21,12 @@
../../modules/nightly-sweep.nix ../../modules/nightly-sweep.nix
]; ];
# --- Timezone: create /etc/localtime. Some recipes bind-mount the host's /etc/localtime into
# their containers (e.g. immich); without a set timezone NixOS leaves /etc/localtime absent, so
# that bind fails ("bind source path does not exist: /etc/localtime") and the service is rejected.
# UTC is the right default for a CI host (deterministic timestamps). ---
time.timeZone = "UTC";
# --- Tailscale (ACCESS-CRITICAL: do not break, this is the only route in) --- # --- Tailscale (ACCESS-CRITICAL: do not break, this is the only route in) ---
# Baseline read the hostname from /etc/ts-hostname at eval time; that is impure # Baseline read the hostname from /etc/ts-hostname at eval time; that is impure
# under flakes, so we pin the known hostname. The reusable auth-key file persists. # under flakes, so we pin the known hostname. The reusable auth-key file persists.