Update groups
This commit is contained in:
parent
2a456d8897
commit
e64137c3ab
16 changed files with 16 additions and 16 deletions
|
@ -68,7 +68,7 @@ in
|
||||||
# restartUnits = [ "${app}.service" ];
|
# restartUnits = [ "${app}.service" ];
|
||||||
# };
|
# };
|
||||||
|
|
||||||
users.users.truxnell.extraGroups = [ group ];
|
users.users.jahanson.extraGroups = [ group ];
|
||||||
|
|
||||||
|
|
||||||
# Folder perms - only for containers
|
# Folder perms - only for containers
|
||||||
|
|
|
@ -73,7 +73,7 @@ in
|
||||||
restartUnits = [ "podman-${app}.service" ];
|
restartUnits = [ "podman-${app}.service" ];
|
||||||
};
|
};
|
||||||
|
|
||||||
users.users.truxnell.extraGroups = [ group ];
|
users.users.jahanson.extraGroups = [ group ];
|
||||||
|
|
||||||
|
|
||||||
# Folder perms - only for containers
|
# Folder perms - only for containers
|
||||||
|
|
|
@ -45,7 +45,7 @@ in
|
||||||
};
|
};
|
||||||
};
|
};
|
||||||
# add user to group to view files/storage
|
# add user to group to view files/storage
|
||||||
users.users.truxnell.extraGroups = [ "${app}" ];
|
users.users.jahanson.extraGroups = [ "${app}" ];
|
||||||
|
|
||||||
sops.secrets."services/${app}/env" = {
|
sops.secrets."services/${app}/env" = {
|
||||||
sopsFile = ./secrets.sops.yaml;
|
sopsFile = ./secrets.sops.yaml;
|
||||||
|
|
|
@ -67,7 +67,7 @@ in
|
||||||
# restartUnits = [ "${app}.service" ];
|
# restartUnits = [ "${app}.service" ];
|
||||||
# };
|
# };
|
||||||
|
|
||||||
users.users.truxnell.extraGroups = [ group ];
|
users.users.jahanson.extraGroups = [ group ];
|
||||||
|
|
||||||
|
|
||||||
# Folder perms
|
# Folder perms
|
||||||
|
|
|
@ -66,7 +66,7 @@ in
|
||||||
# restartUnits = [ "${app}.service" ];
|
# restartUnits = [ "${app}.service" ];
|
||||||
# };
|
# };
|
||||||
|
|
||||||
users.users.truxnell.extraGroups = [ group ];
|
users.users.jahanson.extraGroups = [ group ];
|
||||||
|
|
||||||
|
|
||||||
environment.persistence."${config.mySystem.system.impermanence.persistPath}" = lib.mkIf config.mySystem.system.impermanence.enable {
|
environment.persistence."${config.mySystem.system.impermanence.persistPath}" = lib.mkIf config.mySystem.system.impermanence.enable {
|
||||||
|
|
|
@ -66,7 +66,7 @@ in
|
||||||
# restartUnits = [ "${app}.service" ];
|
# restartUnits = [ "${app}.service" ];
|
||||||
# };
|
# };
|
||||||
|
|
||||||
users.users.truxnell.extraGroups = [ group ];
|
users.users.jahanson.extraGroups = [ group ];
|
||||||
|
|
||||||
## service
|
## service
|
||||||
services.grafana = {
|
services.grafana = {
|
||||||
|
|
|
@ -68,7 +68,7 @@ in
|
||||||
# restartUnits = [ "${app}.service" ];
|
# restartUnits = [ "${app}.service" ];
|
||||||
# };
|
# };
|
||||||
|
|
||||||
users.users.truxnell.extraGroups = [ group ];
|
users.users.jahanson.extraGroups = [ group ];
|
||||||
|
|
||||||
|
|
||||||
# Folder perms - only for containers
|
# Folder perms - only for containers
|
||||||
|
|
|
@ -67,7 +67,7 @@ in
|
||||||
restartUnits = [ "${app}.service" ];
|
restartUnits = [ "${app}.service" ];
|
||||||
};
|
};
|
||||||
|
|
||||||
users.users.truxnell.extraGroups = [ group ];
|
users.users.jahanson.extraGroups = [ group ];
|
||||||
users.users.miniflux = {
|
users.users.miniflux = {
|
||||||
isSystemUser = true;
|
isSystemUser = true;
|
||||||
group = "miniflux";
|
group = "miniflux";
|
||||||
|
|
|
@ -51,7 +51,7 @@ in
|
||||||
directories = [{ directory = appFolder; inherit user; inherit group; mode = "750"; }];
|
directories = [{ directory = appFolder; inherit user; inherit group; mode = "750"; }];
|
||||||
};
|
};
|
||||||
|
|
||||||
users.users.truxnell.extraGroups = [ "mosquitto" ];
|
users.users.jahanson.extraGroups = [ "mosquitto" ];
|
||||||
networking.firewall.allowedTCPPorts = [ 1883 ];
|
networking.firewall.allowedTCPPorts = [ 1883 ];
|
||||||
|
|
||||||
};
|
};
|
||||||
|
|
|
@ -44,7 +44,7 @@ in
|
||||||
group = "kah";
|
group = "kah";
|
||||||
};
|
};
|
||||||
users.groups.kah = { };
|
users.groups.kah = { };
|
||||||
users.users.truxnell.extraGroups = [ "kah" ];
|
users.users.jahanson.extraGroups = [ "kah" ];
|
||||||
};
|
};
|
||||||
|
|
||||||
}
|
}
|
||||||
|
|
|
@ -60,7 +60,7 @@ in
|
||||||
# restartUnits = [ "${app}.service" ];
|
# restartUnits = [ "${app}.service" ];
|
||||||
# };
|
# };
|
||||||
|
|
||||||
users.users.truxnell.extraGroups = [ group ];
|
users.users.jahanson.extraGroups = [ group ];
|
||||||
|
|
||||||
## service
|
## service
|
||||||
# ref: https://github.com/nmasur/dotfiles/blob/aea33592361215356c0fbe5e9d533906f0a023cc/modules/nixos/services/prometheus.nix#L19
|
# ref: https://github.com/nmasur/dotfiles/blob/aea33592361215356c0fbe5e9d533906f0a023cc/modules/nixos/services/prometheus.nix#L19
|
||||||
|
|
|
@ -67,7 +67,7 @@ in
|
||||||
restartUnits = [ "${app}.service" ];
|
restartUnits = [ "${app}.service" ];
|
||||||
};
|
};
|
||||||
|
|
||||||
users.users.truxnell.extraGroups = [ group ];
|
users.users.jahanson.extraGroups = [ group ];
|
||||||
|
|
||||||
environment.persistence."${config.mySystem.system.impermanence.persistPath}" = lib.mkIf config.mySystem.system.impermanence.enable {
|
environment.persistence."${config.mySystem.system.impermanence.persistPath}" = lib.mkIf config.mySystem.system.impermanence.enable {
|
||||||
hideMounts = true;
|
hideMounts = true;
|
||||||
|
|
|
@ -68,7 +68,7 @@ in
|
||||||
# restartUnits = [ "${app}.service" ];
|
# restartUnits = [ "${app}.service" ];
|
||||||
# };
|
# };
|
||||||
|
|
||||||
users.users.truxnell.extraGroups = [ group ];
|
users.users.jahanson.extraGroups = [ group ];
|
||||||
|
|
||||||
## service
|
## service
|
||||||
services.rss-bridge = {
|
services.rss-bridge = {
|
||||||
|
|
|
@ -131,7 +131,7 @@ in
|
||||||
};
|
};
|
||||||
|
|
||||||
# add user to group to view files/storage
|
# add user to group to view files/storage
|
||||||
users.users.truxnell.extraGroups = [ "traefik" ];
|
users.users.jahanson.extraGroups = [ "traefik" ];
|
||||||
|
|
||||||
services.traefik = {
|
services.traefik = {
|
||||||
# TODO refactor into subfiles
|
# TODO refactor into subfiles
|
||||||
|
|
|
@ -72,7 +72,7 @@ in
|
||||||
directories = [{ directory = appFolder; inherit user; inherit group; mode = "750"; }];
|
directories = [{ directory = appFolder; inherit user; inherit group; mode = "750"; }];
|
||||||
};
|
};
|
||||||
|
|
||||||
users.users.truxnell.extraGroups = [ app ];
|
users.users.jahanson.extraGroups = [ app ];
|
||||||
|
|
||||||
services.nginx.virtualHosts."${app}.${config.networking.domain}" = {
|
services.nginx.virtualHosts."${app}.${config.networking.domain}" = {
|
||||||
useACMEHost = config.networking.domain;
|
useACMEHost = config.networking.domain;
|
||||||
|
|
|
@ -29,7 +29,7 @@ in
|
||||||
description = "Notify on failed unit %i";
|
description = "Notify on failed unit %i";
|
||||||
serviceConfig = {
|
serviceConfig = {
|
||||||
Type = "oneshot";
|
Type = "oneshot";
|
||||||
# User = config.users.users.truxnell.name;
|
# User = config.users.users.jahanson.name;
|
||||||
EnvironmentFile = config.sops.secrets."services/pushover/env".path;
|
EnvironmentFile = config.sops.secrets."services/pushover/env".path;
|
||||||
};
|
};
|
||||||
|
|
||||||
|
|
Reference in a new issue