nixos/nomad: move serviceConfig into mkMerge and mkIf for docker SupplementaryGroups
This commit is contained in:
parent
f3aa71b7ec
commit
58fe45936e
@ -122,7 +122,8 @@ in
|
||||
iptables
|
||||
]);
|
||||
|
||||
serviceConfig = {
|
||||
serviceConfig = mkMerge [
|
||||
{
|
||||
DynamicUser = cfg.dropPrivileges;
|
||||
ExecReload = "${pkgs.coreutils}/bin/kill -HUP $MAINPID";
|
||||
ExecStart = "${cfg.package}/bin/nomad agent -config=/etc/nomad.json" +
|
||||
@ -138,9 +139,9 @@ in
|
||||
StateDirectory = "nomad";
|
||||
TasksMax = "infinity";
|
||||
User = optionalString cfg.dropPrivileges "nomad";
|
||||
} // (optionalAttrs cfg.enableDocker {
|
||||
SupplementaryGroups = "docker"; # space-separated string
|
||||
});
|
||||
}
|
||||
(mkIf cfg.enableDocker { SupplementaryGroups = "docker"; }) # space-separated string
|
||||
];
|
||||
|
||||
unitConfig = {
|
||||
StartLimitIntervalSec = 10;
|
||||
|
Loading…
x
Reference in New Issue
Block a user