Run all nixng containers under particular user/group

This commit is contained in:
Pim Kunis 2025-01-05 00:17:35 +01:00
parent fe960448c6
commit a22c34716e
10 changed files with 117 additions and 23 deletions

View file

@ -1,10 +1,12 @@
{
lib,
nglib,
pkgs,
config,
...
}: let
cfg = config.services.jellyseerr;
cfgInit = config.init.services.jellyseerr;
in {
options.services.jellyseerr = {
enable = lib.mkEnableOption "jellyseerr";
@ -33,14 +35,28 @@ in {
init.services.jellyseerr = {
enabled = true;
script = lib.getExe cfg.package;
user = lib.mkDefault "jellyseerr";
group = lib.mkDefault "jellyseerr";
};
environment = {
systemPackages = [cfg.package];
variables = {
PORT = builtins.toString cfg.port;
CONFIG_DIRECTORY = cfg.configDir;
};
};
users.users.${cfgInit.user} = nglib.mkDefaultRec {
description = "jellyseerr";
group = cfgInit.group;
createHome = false;
home = "/var/empty";
useDefaultShell = true;
uid = config.ids.uids.jellyseerr;
};
users.groups.${cfgInit.group} = nglib.mkDefaultRec {gid = config.ids.gids.jellyseerr;};
};
}