Update groups

This commit is contained in:
Joseph Hanson 2024-05-10 20:39:43 -05:00
parent 2a456d8897
commit e64137c3ab
16 changed files with 16 additions and 16 deletions

View file

@ -68,7 +68,7 @@ in
# restartUnits = [ "${app}.service" ]; # restartUnits = [ "${app}.service" ];
# }; # };
users.users.truxnell.extraGroups = [ group ]; users.users.jahanson.extraGroups = [ group ];
# Folder perms - only for containers # Folder perms - only for containers

View file

@ -73,7 +73,7 @@ in
restartUnits = [ "podman-${app}.service" ]; restartUnits = [ "podman-${app}.service" ];
}; };
users.users.truxnell.extraGroups = [ group ]; users.users.jahanson.extraGroups = [ group ];
# Folder perms - only for containers # Folder perms - only for containers

View file

@ -45,7 +45,7 @@ in
}; };
}; };
# add user to group to view files/storage # add user to group to view files/storage
users.users.truxnell.extraGroups = [ "${app}" ]; users.users.jahanson.extraGroups = [ "${app}" ];
sops.secrets."services/${app}/env" = { sops.secrets."services/${app}/env" = {
sopsFile = ./secrets.sops.yaml; sopsFile = ./secrets.sops.yaml;

View file

@ -67,7 +67,7 @@ in
# restartUnits = [ "${app}.service" ]; # restartUnits = [ "${app}.service" ];
# }; # };
users.users.truxnell.extraGroups = [ group ]; users.users.jahanson.extraGroups = [ group ];
# Folder perms # Folder perms

View file

@ -66,7 +66,7 @@ in
# restartUnits = [ "${app}.service" ]; # restartUnits = [ "${app}.service" ];
# }; # };
users.users.truxnell.extraGroups = [ group ]; users.users.jahanson.extraGroups = [ group ];
environment.persistence."${config.mySystem.system.impermanence.persistPath}" = lib.mkIf config.mySystem.system.impermanence.enable { environment.persistence."${config.mySystem.system.impermanence.persistPath}" = lib.mkIf config.mySystem.system.impermanence.enable {

View file

@ -66,7 +66,7 @@ in
# restartUnits = [ "${app}.service" ]; # restartUnits = [ "${app}.service" ];
# }; # };
users.users.truxnell.extraGroups = [ group ]; users.users.jahanson.extraGroups = [ group ];
## service ## service
services.grafana = { services.grafana = {

View file

@ -68,7 +68,7 @@ in
# restartUnits = [ "${app}.service" ]; # restartUnits = [ "${app}.service" ];
# }; # };
users.users.truxnell.extraGroups = [ group ]; users.users.jahanson.extraGroups = [ group ];
# Folder perms - only for containers # Folder perms - only for containers

View file

@ -67,7 +67,7 @@ in
restartUnits = [ "${app}.service" ]; restartUnits = [ "${app}.service" ];
}; };
users.users.truxnell.extraGroups = [ group ]; users.users.jahanson.extraGroups = [ group ];
users.users.miniflux = { users.users.miniflux = {
isSystemUser = true; isSystemUser = true;
group = "miniflux"; group = "miniflux";

View file

@ -51,7 +51,7 @@ in
directories = [{ directory = appFolder; inherit user; inherit group; mode = "750"; }]; directories = [{ directory = appFolder; inherit user; inherit group; mode = "750"; }];
}; };
users.users.truxnell.extraGroups = [ "mosquitto" ]; users.users.jahanson.extraGroups = [ "mosquitto" ];
networking.firewall.allowedTCPPorts = [ 1883 ]; networking.firewall.allowedTCPPorts = [ 1883 ];
}; };

View file

@ -44,7 +44,7 @@ in
group = "kah"; group = "kah";
}; };
users.groups.kah = { }; users.groups.kah = { };
users.users.truxnell.extraGroups = [ "kah" ]; users.users.jahanson.extraGroups = [ "kah" ];
}; };
} }

View file

@ -60,7 +60,7 @@ in
# restartUnits = [ "${app}.service" ]; # restartUnits = [ "${app}.service" ];
# }; # };
users.users.truxnell.extraGroups = [ group ]; users.users.jahanson.extraGroups = [ group ];
## service ## service
# ref: https://github.com/nmasur/dotfiles/blob/aea33592361215356c0fbe5e9d533906f0a023cc/modules/nixos/services/prometheus.nix#L19 # ref: https://github.com/nmasur/dotfiles/blob/aea33592361215356c0fbe5e9d533906f0a023cc/modules/nixos/services/prometheus.nix#L19

View file

@ -67,7 +67,7 @@ in
restartUnits = [ "${app}.service" ]; restartUnits = [ "${app}.service" ];
}; };
users.users.truxnell.extraGroups = [ group ]; users.users.jahanson.extraGroups = [ group ];
environment.persistence."${config.mySystem.system.impermanence.persistPath}" = lib.mkIf config.mySystem.system.impermanence.enable { environment.persistence."${config.mySystem.system.impermanence.persistPath}" = lib.mkIf config.mySystem.system.impermanence.enable {
hideMounts = true; hideMounts = true;

View file

@ -68,7 +68,7 @@ in
# restartUnits = [ "${app}.service" ]; # restartUnits = [ "${app}.service" ];
# }; # };
users.users.truxnell.extraGroups = [ group ]; users.users.jahanson.extraGroups = [ group ];
## service ## service
services.rss-bridge = { services.rss-bridge = {

View file

@ -131,7 +131,7 @@ in
}; };
# add user to group to view files/storage # add user to group to view files/storage
users.users.truxnell.extraGroups = [ "traefik" ]; users.users.jahanson.extraGroups = [ "traefik" ];
services.traefik = { services.traefik = {
# TODO refactor into subfiles # TODO refactor into subfiles

View file

@ -72,7 +72,7 @@ in
directories = [{ directory = appFolder; inherit user; inherit group; mode = "750"; }]; directories = [{ directory = appFolder; inherit user; inherit group; mode = "750"; }];
}; };
users.users.truxnell.extraGroups = [ app ]; users.users.jahanson.extraGroups = [ app ];
services.nginx.virtualHosts."${app}.${config.networking.domain}" = { services.nginx.virtualHosts."${app}.${config.networking.domain}" = {
useACMEHost = config.networking.domain; useACMEHost = config.networking.domain;

View file

@ -29,7 +29,7 @@ in
description = "Notify on failed unit %i"; description = "Notify on failed unit %i";
serviceConfig = { serviceConfig = {
Type = "oneshot"; Type = "oneshot";
# User = config.users.users.truxnell.name; # User = config.users.users.jahanson.name;
EnvironmentFile = config.sops.secrets."services/pushover/env".path; EnvironmentFile = config.sops.secrets."services/pushover/env".path;
}; };