Update homepage jail to use single self-signed cert for gemini

1 files changed, 5 insertions, 3 deletions

diff --git a/roles/jail/templates/jail_conf.j2 b/roles/jail/templates/jail_conf.j2
index f4243c7..d8e0667 100644
--- a/roles/jail/templates/jail_conf.j2
+++ b/roles/jail/templates/jail_conf.j2
@@ -1,14 +1,16 @@
 {{ jail.name }} {
   vnet;
-  persist;
   exec.clean;
   allow.raw_sockets;
-  mount.devfs;
+
+  mount.devfs;      # Mount /dev according to devfs_ruleset
+  devfs_ruleset = {{ jail.devfs_ruleset }};
+
+  enforce_statfs = 1; # Let jail see own mounts
 {% for opt in jail.options %}
   {{ opt }};
 {% endfor %}
 
-  devfs_ruleset = {{ jail.devfs_ruleset }};
   host.hostname = "${name}";
   path = "/usr/local/jails/containers/${name}";