nixos/nomad: move serviceConfig into mkMerge and mkIf for docker SupplementaryGroups

This commit is contained in:
Phillip Cloud 2021-01-18 09:05:59 -05:00
parent f3aa71b7ec
commit 58fe45936e

View File

@ -122,7 +122,8 @@ in
iptables
]);
serviceConfig = {
serviceConfig = mkMerge [
{
DynamicUser = cfg.dropPrivileges;
ExecReload = "${pkgs.coreutils}/bin/kill -HUP $MAINPID";
ExecStart = "${cfg.package}/bin/nomad agent -config=/etc/nomad.json" +
@ -138,9 +139,9 @@ in
StateDirectory = "nomad";
TasksMax = "infinity";
User = optionalString cfg.dropPrivileges "nomad";
} // (optionalAttrs cfg.enableDocker {
SupplementaryGroups = "docker"; # space-separated string
});
}
(mkIf cfg.enableDocker { SupplementaryGroups = "docker"; }) # space-separated string
];
unitConfig = {
StartLimitIntervalSec = 10;