lukegb/depot
1
0
Fork 0
Code Issues 1 Pull requests Projects Packages Activity Actions

ops/nixos: set group for isSystemUser users

Browse source
This commit is contained in:
Luke Granger-Brown 2021-09-16 19:14:30 +00:00
parent cb7811898c
commit 19782a9e63
3 changed files with 8 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
ops/nixos/clouvider-fra01/default.nix
View file

@ -121,7 +121,7 @@ in {
lukegb.extraGroups = [ "wheel" "content" "deluge" ];
content = {
isSystemUser = true;
extraGroups = [ "content" ];
group = "content";
};
plex.extraGroups = [ "content" ];
deluge.extraGroups = [ "content" ];

2
ops/nixos/lib/common.nix
View file

@ -118,6 +118,7 @@ in
deployer = {
isSystemUser = true;
uid = 1001;
group = "deployer";
hashedPassword = "!";
useDefaultShell = true;
home = "/var/lib/deployer";
@ -128,6 +129,7 @@ in
];
};
};
users.groups.deployer = {};
security.sudo.extraRules = [{
users = [ "deployer" ];
commands = [{

6
ops/nixos/lib/minotarproxy.nix
View file

@ -12,7 +12,11 @@ in {
80 443
];
users.users.minotarproxy.isSystemUser = true;
users.users.minotarproxy = {
isSystemUser = true;
group = "minotarproxy";
};
users.groups.minotarproxy = {};
systemd.services.minotarproxy = {
description = "Minotar proxy";