Skip to content
Snippets Groups Projects
Commit 3c488fe2 authored by Tom Prince's avatar Tom Prince
Browse files

Don't use a group of `nobody` for users.

This is disallowed in nixos 21.11 as it is a potential security issue.
parent e16a12da
No related branches found
No related tags found
2 merge requests!264merge develop into production,!222Update nixos to 21.11
...@@ -156,6 +156,10 @@ in ...@@ -156,6 +156,10 @@ in
nameValuePair "tahoe.introducer-${node}" { nameValuePair "tahoe.introducer-${node}" {
description = "Tahoe node user for introducer ${node}"; description = "Tahoe node user for introducer ${node}";
isSystemUser = true; isSystemUser = true;
group = "tahoe.introducer-${node}";
});
users.groups = flip mapAttrs' cfg.introducers (node: _:
nameValuePair "tahoe.introducer-${node}" {
}); });
}) })
(mkIf (cfg.nodes != {}) { (mkIf (cfg.nodes != {}) {
...@@ -287,6 +291,10 @@ in ...@@ -287,6 +291,10 @@ in
nameValuePair "tahoe.${node}" { nameValuePair "tahoe.${node}" {
description = "Tahoe node user for node ${node}"; description = "Tahoe node user for node ${node}";
isSystemUser = true; isSystemUser = true;
group = "tahoe.${node}";
});
users.groups = flip mapAttrs' cfg.introducers (node: _:
nameValuePair "tahoe.${node}" {
}); });
}) })
]; ];
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment