From 501d53b2388ede3114c39f78102713ceff361dff Mon Sep 17 00:00:00 2001
From: Patrick Mulligan <patjmulligan@protonmail.com>
Date: Sun, 11 Jan 2026 18:31:49 +0100
Subject: [PATCH] Fix node-gyp build: add PrivateTmp to lamassu-build service

---
 modules/lamassu-lnbits.nix | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/modules/lamassu-lnbits.nix b/modules/lamassu-lnbits.nix
index 3ca110b..d0e4d43 100644
--- a/modules/lamassu-lnbits.nix
+++ b/modules/lamassu-lnbits.nix
@@ -270,6 +270,8 @@ in
         CI = "true";
         CC = "${pkgs.stdenv.cc}/bin/cc";
         CXX = "${pkgs.stdenv.cc}/bin/c++";
+        # Use content-addressable store to reduce disk usage
+        npm_config_cache = "${cfg.dataDir}/.npm-cache";
       };
 
       serviceConfig = {
@@ -285,6 +287,8 @@ in
         ProtectHome = true;
         NoNewPrivileges = true;
         ReadWritePaths = [ cfg.dataDir ];
+        # node-gyp needs writable /tmp for native module compilation
+        PrivateTmp = true;
       };
 
       script = ''