lukegb/depot
1
0
Fork 0
Code Issues 1 Pull requests Projects Packages Activity Actions

ops/nixos: set group for isSystemUser users

Browse source
This commit is contained in:
Luke Granger-Brown 2021-09-16 19:14:30 +00:00
parent cb7811898c
commit 19782a9e63
3 changed files with 8 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
ops/nixos/clouvider-fra01/default.nix
View file

@ -121,7 +121,7 @@ in {
lukegb.extraGroups = [ "wheel" "content" "deluge" ]; lukegb.extraGroups = [ "wheel" "content" "deluge" ];
content = { content = {
isSystemUser = true; isSystemUser = true;
extraGroups = [ "content" ]; group = "content";
}; };
plex.extraGroups = [ "content" ]; plex.extraGroups = [ "content" ];
deluge.extraGroups = [ "content" ]; deluge.extraGroups = [ "content" ];

2
ops/nixos/lib/common.nix
View file

@ -118,6 +118,7 @@ in
deployer = { deployer = {
isSystemUser = true; isSystemUser = true;
uid = 1001; uid = 1001;
group = "deployer";
hashedPassword = "!"; hashedPassword = "!";
useDefaultShell = true; useDefaultShell = true;
home = "/var/lib/deployer"; home = "/var/lib/deployer";
@ -128,6 +129,7 @@ in
]; ];
}; };
}; };
users.groups.deployer = {};
security.sudo.extraRules = [{ security.sudo.extraRules = [{
users = [ "deployer" ]; users = [ "deployer" ];
commands = [{ commands = [{

6
ops/nixos/lib/minotarproxy.nix
View file

@ -12,7 +12,11 @@ in {
80 443 80 443
]; ];
users.users.minotarproxy.isSystemUser = true; users.users.minotarproxy = {
isSystemUser = true;
group = "minotarproxy";
};
users.groups.minotarproxy = {};
systemd.services.minotarproxy = { systemd.services.minotarproxy = {
description = "Minotar proxy"; description = "Minotar proxy";