202 current 2025-10-10 00:53:49 25.05.20251006.20c4598 6.12.50 *
This commit is contained in:
@@ -1,6 +1,6 @@
|
|||||||
# flake for blakes nixos config
|
# flake for blakes nixos config
|
||||||
# define new devices in outputs
|
# define new devices in outputs
|
||||||
# generation: 201 current 2025-10-10 00:48:28 25.05.20251006.20c4598 6.12.50 *
|
# generation: 202 current 2025-10-10 00:53:49 25.05.20251006.20c4598 6.12.50 *
|
||||||
{
|
{
|
||||||
description = "blakes nix config";
|
description = "blakes nix config";
|
||||||
inputs = {
|
inputs = {
|
||||||
|
|||||||
@@ -41,7 +41,7 @@ in
|
|||||||
config = lib.mkIf cfg.enable {
|
config = lib.mkIf cfg.enable {
|
||||||
|
|
||||||
# declare ${service} group
|
# declare ${service} group
|
||||||
users.groups.${service} = { gid = lib.mkForce cfg.ids; };
|
users.groups.hass = { gid = lib.mkForce cfg.ids; };
|
||||||
|
|
||||||
# declare ${service} user
|
# declare ${service} user
|
||||||
users.users.${service} = {
|
users.users.${service} = {
|
||||||
@@ -50,7 +50,7 @@ in
|
|||||||
isSystemUser = true;
|
isSystemUser = true;
|
||||||
#home = cfg.data_dir;
|
#home = cfg.data_dir;
|
||||||
#createHome = true;
|
#createHome = true;
|
||||||
group = "${service}";
|
group = "hass";
|
||||||
extraGroups = [ "bluetooth" ];
|
extraGroups = [ "bluetooth" ];
|
||||||
};
|
};
|
||||||
|
|
||||||
@@ -83,8 +83,8 @@ in
|
|||||||
# override umask to make permissions work out
|
# override umask to make permissions work out
|
||||||
systemd.services.${service}.serviceConfig = {
|
systemd.services.${service}.serviceConfig = {
|
||||||
UMask = lib.mkForce "0007";
|
UMask = lib.mkForce "0007";
|
||||||
User = lib.mkForce "${service}";
|
User = lib.mkForce "hass";
|
||||||
Group = lib.mkForce "${service}";
|
Group = lib.mkForce "hass";
|
||||||
};
|
};
|
||||||
|
|
||||||
# # open firewall
|
# # open firewall
|
||||||
|
|||||||
Reference in New Issue
Block a user