Run all nixng containers under particular user/group
This commit is contained in:
parent
fe960448c6
commit
a22c34716e
10 changed files with 117 additions and 23 deletions
|
@ -1,10 +1,12 @@
|
|||
{
|
||||
lib,
|
||||
nglib,
|
||||
pkgs,
|
||||
config,
|
||||
...
|
||||
}: let
|
||||
cfg = config.services.jellyseerr;
|
||||
cfgInit = config.init.services.jellyseerr;
|
||||
in {
|
||||
options.services.jellyseerr = {
|
||||
enable = lib.mkEnableOption "jellyseerr";
|
||||
|
@ -33,14 +35,28 @@ in {
|
|||
init.services.jellyseerr = {
|
||||
enabled = true;
|
||||
script = lib.getExe cfg.package;
|
||||
user = lib.mkDefault "jellyseerr";
|
||||
group = lib.mkDefault "jellyseerr";
|
||||
};
|
||||
|
||||
environment = {
|
||||
systemPackages = [cfg.package];
|
||||
|
||||
variables = {
|
||||
PORT = builtins.toString cfg.port;
|
||||
CONFIG_DIRECTORY = cfg.configDir;
|
||||
};
|
||||
};
|
||||
|
||||
users.users.${cfgInit.user} = nglib.mkDefaultRec {
|
||||
description = "jellyseerr";
|
||||
group = cfgInit.group;
|
||||
createHome = false;
|
||||
home = "/var/empty";
|
||||
useDefaultShell = true;
|
||||
uid = config.ids.uids.jellyseerr;
|
||||
};
|
||||
|
||||
users.groups.${cfgInit.group} = nglib.mkDefaultRec {gid = config.ids.gids.jellyseerr;};
|
||||
};
|
||||
}
|
||||
|
|
Loading…
Add table
Add a link
Reference in a new issue