nixos/ckb: Add option to restrict access to the devices to a particular group
fixes #34064
This commit is contained in:
parent
c48411a404
commit
99a8c45bdd
@ -10,6 +10,15 @@ in
|
|||||||
options.hardware.ckb-next = {
|
options.hardware.ckb-next = {
|
||||||
enable = mkEnableOption "the Corsair keyboard/mouse driver";
|
enable = mkEnableOption "the Corsair keyboard/mouse driver";
|
||||||
|
|
||||||
|
gid = mkOption {
|
||||||
|
type = types.nullOr types.int;
|
||||||
|
default = null;
|
||||||
|
example = 100;
|
||||||
|
description = ''
|
||||||
|
Limit access to the ckb daemon to a particular group.
|
||||||
|
'';
|
||||||
|
};
|
||||||
|
|
||||||
package = mkOption {
|
package = mkOption {
|
||||||
type = types.package;
|
type = types.package;
|
||||||
default = pkgs.ckb-next;
|
default = pkgs.ckb-next;
|
||||||
@ -26,8 +35,8 @@ in
|
|||||||
systemd.services.ckb-next = {
|
systemd.services.ckb-next = {
|
||||||
description = "Corsair Keyboards and Mice Daemon";
|
description = "Corsair Keyboards and Mice Daemon";
|
||||||
wantedBy = ["multi-user.target"];
|
wantedBy = ["multi-user.target"];
|
||||||
script = "exec ${cfg.package}/bin/ckb-next-daemon";
|
|
||||||
serviceConfig = {
|
serviceConfig = {
|
||||||
|
ExecStart = "${cfg.package}/bin/ckb-next-daemon ${optionalString (cfg.gid != null) "--gid=${builtins.toString cfg.gid}"}";
|
||||||
Restart = "on-failure";
|
Restart = "on-failure";
|
||||||
StandardOutput = "syslog";
|
StandardOutput = "syslog";
|
||||||
};
|
};
|
||||||
|
Loading…
x
Reference in New Issue
Block a user