privatevoid.net/depot
1
1
Fork 0
Code Issues 23 Pull requests 2 Projects 3 Releases Packages Wiki Activity Actions

Revert "cluster/services/attic: use DynamicUser"

Browse source 
This reverts commit 2a75c2ae02.
This commit is contained in:
Max Headroom 2023-12-02 00:10:58 +01:00
parent 02ea8d50c7
commit 9c9c8d250d
1 changed files with 13 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

13
cluster/services/attic/server.nix
View file

@ -53,8 +53,21 @@ in
}; };
}; };
users = {
users.atticd = {
isSystemUser = true;
group = "atticd";
home = "/var/lib/atticd";
createHome = true;
};
groups.atticd = {};
};
systemd.services.atticd = { systemd.services.atticd = {
after = [ "postgresql.service" ]; after = [ "postgresql.service" ];
serviceConfig = {
DynamicUser = lib.mkForce false;
};
environment = { environment = {
AWS_SHARED_CREDENTIALS_FILE = config.age.secrets.atticS3Credentials.path; AWS_SHARED_CREDENTIALS_FILE = config.age.secrets.atticS3Credentials.path;
PGPASSFILE = config.age.secrets.atticDBCredentials.path; PGPASSFILE = config.age.secrets.atticDBCredentials.path;