202 current 2025-10-10 00:53:49 25.05.20251006.20c4598 6.12.50 *
This commit is contained in:
@@ -1,6 +1,6 @@
|
||||
# flake for blakes nixos config
|
||||
# define new devices in outputs
|
||||
# generation: 201 current 2025-10-10 00:48:28 25.05.20251006.20c4598 6.12.50 *
|
||||
# generation: 202 current 2025-10-10 00:53:49 25.05.20251006.20c4598 6.12.50 *
|
||||
{
|
||||
description = "blakes nix config";
|
||||
inputs = {
|
||||
|
||||
@@ -41,7 +41,7 @@ in
|
||||
config = lib.mkIf cfg.enable {
|
||||
|
||||
# declare ${service} group
|
||||
users.groups.${service} = { gid = lib.mkForce cfg.ids; };
|
||||
users.groups.hass = { gid = lib.mkForce cfg.ids; };
|
||||
|
||||
# declare ${service} user
|
||||
users.users.${service} = {
|
||||
@@ -50,7 +50,7 @@ in
|
||||
isSystemUser = true;
|
||||
#home = cfg.data_dir;
|
||||
#createHome = true;
|
||||
group = "${service}";
|
||||
group = "hass";
|
||||
extraGroups = [ "bluetooth" ];
|
||||
};
|
||||
|
||||
@@ -83,8 +83,8 @@ in
|
||||
# override umask to make permissions work out
|
||||
systemd.services.${service}.serviceConfig = {
|
||||
UMask = lib.mkForce "0007";
|
||||
User = lib.mkForce "${service}";
|
||||
Group = lib.mkForce "${service}";
|
||||
User = lib.mkForce "hass";
|
||||
Group = lib.mkForce "hass";
|
||||
};
|
||||
|
||||
# # open firewall
|
||||
|
||||
Reference in New Issue
Block a user