Fix service uid/gids

This commit is contained in:
Tristan Daniël Maat 2021-12-26 19:00:59 +00:00
parent 9060cb6414
commit bd7e4a3193
Signed by: tlater
GPG key ID: 49670FD774E43268
3 changed files with 28 additions and 11 deletions
configuration/services

View file

@ -1,10 +1,14 @@
{ config, pkgs, ... }:
{
users.extraUsers.webserver = {
uid = config.ids.uids.webserver;
isSystemUser = true;
description = "tlater.net web server user";
users = {
extraUsers.webserver = {
uid = config.ids.uids.webserver;
group = config.users.extraGroups.webserver.name;
isSystemUser = true;
description = "tlater.net web server user";
};
extraGroups.webserver = { gid = config.ids.gids.webserver; };
};
virtualisation.oci-containers.containers.webserver = {
@ -16,10 +20,8 @@
contents = pkgs.tlaternet-webserver.webserver;
config = let
user = config.users.extraUsers.webserver;
group = config.users.groups.${user.group};
uid = toString user.uid;
gid = toString group.gid;
uid = toString config.users.extraUsers.webserver.uid;
gid = toString config.users.extraGroups.webserver.gid;
in {
Cmd = [ "tlaternet-webserver" ];
Volumes = { "/srv/mail" = { }; };