lukegb/depot
1
0
Fork 0
Code Issues 1 Pull requests Projects Packages Activity Actions

ops/nixos/lib/content: fixup

Browse source
This commit is contained in:
Luke Granger-Brown 2023-03-12 03:35:48 +00:00
parent ca7b57a78a
commit c5d4542bbb
1 changed files with 31 additions and 25 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

56
ops/nixos/lib/content.nix
View file

@ -2,32 +2,38 @@
#
# SPDX-License-Identifier: Apache-2.0
{ lib, ... }:
{ lib, config, ... }:
{
users.users.content = {
isSystemUser = true;
group = "content";
};
users.groups.content = {};
config = lib.mkMerge [{
users.users.content = {
isSystemUser = true;
group = "content";
};
users.groups.content = {};
users.users.lukegb.extraGroups = [ "content" ];
users.users.sonarr.extraGroups = [ "content" ];
users.users.radarr.extraGroups = [ "content" ];
users.users.deluge.extraGroups = [ "content" ];
users.users.lukegb.extraGroups = [ "content" ];
} (lib.mkIf config.services.nginx.enable {
systemd.services.nginx.serviceConfig = {
SupplementaryGroups = [ "content" ];
};
}) (lib.mkIf config.services.sonarr.enable {
users.users.sonarr.extraGroups = [ "content" ];
systemd.services.sonarr.serviceConfig = {
UMask = "0002";
Group = lib.mkForce "content";
};
}) (lib.mkIf config.services.radarr.enable {
users.users.radarr.extraGroups = [ "content" ];
systemd.services.radarr.serviceConfig = {
UMask = "0002";
Group = lib.mkForce "content";
};
}) (lib.mkIf config.services.deluge.enable {
users.users.deluge.extraGroups = [ "content" ];
systemd.services.nginx.serviceConfig = {
SupplementaryGroups = [ "content" ];
};
systemd.services.deluged.serviceConfig = {
UMask = "0002";
Group = lib.mkForce "content";
};
systemd.services.sonarr.serviceConfig = {
UMask = "0002";
Group = lib.mkForce "content";
};
systemd.services.radarr.serviceConfig = {
UMask = "0002";
Group = lib.mkForce "content";
};
systemd.services.deluged.serviceConfig = {
UMask = "0002";
Group = lib.mkForce "content";
};
})];
}