Update groups
This commit is contained in:
parent
2a456d8897
commit
e64137c3ab
16 changed files with 16 additions and 16 deletions
|
@ -68,7 +68,7 @@ in
|
|||
# restartUnits = [ "${app}.service" ];
|
||||
# };
|
||||
|
||||
users.users.truxnell.extraGroups = [ group ];
|
||||
users.users.jahanson.extraGroups = [ group ];
|
||||
|
||||
|
||||
# Folder perms - only for containers
|
||||
|
|
|
@ -73,7 +73,7 @@ in
|
|||
restartUnits = [ "podman-${app}.service" ];
|
||||
};
|
||||
|
||||
users.users.truxnell.extraGroups = [ group ];
|
||||
users.users.jahanson.extraGroups = [ group ];
|
||||
|
||||
|
||||
# Folder perms - only for containers
|
||||
|
|
|
@ -45,7 +45,7 @@ in
|
|||
};
|
||||
};
|
||||
# add user to group to view files/storage
|
||||
users.users.truxnell.extraGroups = [ "${app}" ];
|
||||
users.users.jahanson.extraGroups = [ "${app}" ];
|
||||
|
||||
sops.secrets."services/${app}/env" = {
|
||||
sopsFile = ./secrets.sops.yaml;
|
||||
|
|
|
@ -67,7 +67,7 @@ in
|
|||
# restartUnits = [ "${app}.service" ];
|
||||
# };
|
||||
|
||||
users.users.truxnell.extraGroups = [ group ];
|
||||
users.users.jahanson.extraGroups = [ group ];
|
||||
|
||||
|
||||
# Folder perms
|
||||
|
|
|
@ -66,7 +66,7 @@ in
|
|||
# restartUnits = [ "${app}.service" ];
|
||||
# };
|
||||
|
||||
users.users.truxnell.extraGroups = [ group ];
|
||||
users.users.jahanson.extraGroups = [ group ];
|
||||
|
||||
|
||||
environment.persistence."${config.mySystem.system.impermanence.persistPath}" = lib.mkIf config.mySystem.system.impermanence.enable {
|
||||
|
|
|
@ -66,7 +66,7 @@ in
|
|||
# restartUnits = [ "${app}.service" ];
|
||||
# };
|
||||
|
||||
users.users.truxnell.extraGroups = [ group ];
|
||||
users.users.jahanson.extraGroups = [ group ];
|
||||
|
||||
## service
|
||||
services.grafana = {
|
||||
|
|
|
@ -68,7 +68,7 @@ in
|
|||
# restartUnits = [ "${app}.service" ];
|
||||
# };
|
||||
|
||||
users.users.truxnell.extraGroups = [ group ];
|
||||
users.users.jahanson.extraGroups = [ group ];
|
||||
|
||||
|
||||
# Folder perms - only for containers
|
||||
|
|
|
@ -67,7 +67,7 @@ in
|
|||
restartUnits = [ "${app}.service" ];
|
||||
};
|
||||
|
||||
users.users.truxnell.extraGroups = [ group ];
|
||||
users.users.jahanson.extraGroups = [ group ];
|
||||
users.users.miniflux = {
|
||||
isSystemUser = true;
|
||||
group = "miniflux";
|
||||
|
|
|
@ -51,7 +51,7 @@ in
|
|||
directories = [{ directory = appFolder; inherit user; inherit group; mode = "750"; }];
|
||||
};
|
||||
|
||||
users.users.truxnell.extraGroups = [ "mosquitto" ];
|
||||
users.users.jahanson.extraGroups = [ "mosquitto" ];
|
||||
networking.firewall.allowedTCPPorts = [ 1883 ];
|
||||
|
||||
};
|
||||
|
|
|
@ -44,7 +44,7 @@ in
|
|||
group = "kah";
|
||||
};
|
||||
users.groups.kah = { };
|
||||
users.users.truxnell.extraGroups = [ "kah" ];
|
||||
users.users.jahanson.extraGroups = [ "kah" ];
|
||||
};
|
||||
|
||||
}
|
||||
|
|
|
@ -60,7 +60,7 @@ in
|
|||
# restartUnits = [ "${app}.service" ];
|
||||
# };
|
||||
|
||||
users.users.truxnell.extraGroups = [ group ];
|
||||
users.users.jahanson.extraGroups = [ group ];
|
||||
|
||||
## service
|
||||
# ref: https://github.com/nmasur/dotfiles/blob/aea33592361215356c0fbe5e9d533906f0a023cc/modules/nixos/services/prometheus.nix#L19
|
||||
|
|
|
@ -67,7 +67,7 @@ in
|
|||
restartUnits = [ "${app}.service" ];
|
||||
};
|
||||
|
||||
users.users.truxnell.extraGroups = [ group ];
|
||||
users.users.jahanson.extraGroups = [ group ];
|
||||
|
||||
environment.persistence."${config.mySystem.system.impermanence.persistPath}" = lib.mkIf config.mySystem.system.impermanence.enable {
|
||||
hideMounts = true;
|
||||
|
|
|
@ -68,7 +68,7 @@ in
|
|||
# restartUnits = [ "${app}.service" ];
|
||||
# };
|
||||
|
||||
users.users.truxnell.extraGroups = [ group ];
|
||||
users.users.jahanson.extraGroups = [ group ];
|
||||
|
||||
## service
|
||||
services.rss-bridge = {
|
||||
|
|
|
@ -131,7 +131,7 @@ in
|
|||
};
|
||||
|
||||
# add user to group to view files/storage
|
||||
users.users.truxnell.extraGroups = [ "traefik" ];
|
||||
users.users.jahanson.extraGroups = [ "traefik" ];
|
||||
|
||||
services.traefik = {
|
||||
# TODO refactor into subfiles
|
||||
|
|
|
@ -72,7 +72,7 @@ in
|
|||
directories = [{ directory = appFolder; inherit user; inherit group; mode = "750"; }];
|
||||
};
|
||||
|
||||
users.users.truxnell.extraGroups = [ app ];
|
||||
users.users.jahanson.extraGroups = [ app ];
|
||||
|
||||
services.nginx.virtualHosts."${app}.${config.networking.domain}" = {
|
||||
useACMEHost = config.networking.domain;
|
||||
|
|
|
@ -29,7 +29,7 @@ in
|
|||
description = "Notify on failed unit %i";
|
||||
serviceConfig = {
|
||||
Type = "oneshot";
|
||||
# User = config.users.users.truxnell.name;
|
||||
# User = config.users.users.jahanson.name;
|
||||
EnvironmentFile = config.sops.secrets."services/pushover/env".path;
|
||||
};
|
||||
|
||||
|
|
Reference in a new issue