Give backplane-dns-client a group.
Also remove ensure-directories, tmpfiles.rules works fine.
This commit is contained in:
parent
976d47cf2d
commit
180b1783c9
@ -71,11 +71,20 @@ in {
|
|||||||
|
|
||||||
config = {
|
config = {
|
||||||
|
|
||||||
users.users = {
|
users = {
|
||||||
|
users = {
|
||||||
"${cfg.user}" = {
|
"${cfg.user}" = {
|
||||||
isSystemUser = true;
|
isSystemUser = true;
|
||||||
createHome = true;
|
createHome = true;
|
||||||
home = "/var/home/${cfg.user}";
|
home = "/var/home/${cfg.user}";
|
||||||
|
group = cfg.user;
|
||||||
|
};
|
||||||
|
};
|
||||||
|
|
||||||
|
groups = {
|
||||||
|
"${cfg.user}" = {
|
||||||
|
members = cfg.user;
|
||||||
|
};
|
||||||
};
|
};
|
||||||
};
|
};
|
||||||
|
|
||||||
|
@ -362,26 +362,6 @@ let
|
|||||||
restrict-address-families = allowed:
|
restrict-address-families = allowed:
|
||||||
if (allowed == [ ]) then [ "~AF_INET" "~AF_INET6" ] else allowed;
|
if (allowed == [ ]) then [ "~AF_INET" "~AF_INET6" ] else allowed;
|
||||||
|
|
||||||
dirOpts = { path, ... }: {
|
|
||||||
options = with types; {
|
|
||||||
user = mkOption {
|
|
||||||
type = str;
|
|
||||||
description = "User by whom the directory will be owned.";
|
|
||||||
default = "nobody";
|
|
||||||
};
|
|
||||||
group = mkOption {
|
|
||||||
type = str;
|
|
||||||
description = "Group by which the directory will be owned.";
|
|
||||||
default = "nogroup";
|
|
||||||
};
|
|
||||||
perms = mkOption {
|
|
||||||
type = str;
|
|
||||||
description = "Permission bits to apply to the directory.";
|
|
||||||
default = "0770";
|
|
||||||
};
|
|
||||||
};
|
|
||||||
};
|
|
||||||
|
|
||||||
in {
|
in {
|
||||||
options.fudo.system = with types; {
|
options.fudo.system = with types; {
|
||||||
services = mkOption {
|
services = mkOption {
|
||||||
@ -395,12 +375,6 @@ in {
|
|||||||
description = "Put tmp filesystem on tmpfs (needs enough RAM).";
|
description = "Put tmp filesystem on tmpfs (needs enough RAM).";
|
||||||
default = true;
|
default = true;
|
||||||
};
|
};
|
||||||
|
|
||||||
ensure-directories = mkOption {
|
|
||||||
type = attrsOf (submodule dirOpts);
|
|
||||||
description = "A map of required directories to directory properties.";
|
|
||||||
default = { };
|
|
||||||
};
|
|
||||||
};
|
};
|
||||||
|
|
||||||
config = {
|
config = {
|
||||||
|
Loading…
x
Reference in New Issue
Block a user