201 current 2025-10-10 00:48:28 25.05.20251006.20c4598 6.12.50 *
This commit is contained in:
@@ -1,6 +1,6 @@
|
||||
# flake for blakes nixos config
|
||||
# define new devices in outputs
|
||||
# generation: 200 current 2025-10-10 00:25:07 25.05.20251006.20c4598 6.12.50 *
|
||||
# generation: 201 current 2025-10-10 00:48:28 25.05.20251006.20c4598 6.12.50 *
|
||||
{
|
||||
description = "blakes nix config";
|
||||
inputs = {
|
||||
|
||||
@@ -48,9 +48,9 @@ in
|
||||
description = "${service} server user";
|
||||
uid = lib.mkForce cfg.ids;
|
||||
isSystemUser = true;
|
||||
home = cfg.data_dir;
|
||||
createHome = true;
|
||||
group = "${service}";
|
||||
#home = cfg.data_dir;
|
||||
#createHome = true;
|
||||
#group = "${service}";
|
||||
extraGroups = [ "bluetooth" ];
|
||||
};
|
||||
|
||||
@@ -83,8 +83,8 @@ in
|
||||
# override umask to make permissions work out
|
||||
systemd.services.${service}.serviceConfig = {
|
||||
UMask = lib.mkForce "0007";
|
||||
User = lib.mkForce "${service}";
|
||||
Group = lib.mkForce "${service}";
|
||||
# User = lib.mkForce "${service}";
|
||||
# Group = lib.mkForce "${service}";
|
||||
};
|
||||
|
||||
# # open firewall
|
||||
|
||||
Reference in New Issue
Block a user