Use DynamicUser in the provided SystemD service
Some checks failed
CI / build (push) Has been cancelled
Some checks failed
CI / build (push) Has been cancelled
This commit is contained in:
@@ -59,12 +59,6 @@
|
|||||||
};
|
};
|
||||||
};
|
};
|
||||||
config = lib.mkIf cfg.enable {
|
config = lib.mkIf cfg.enable {
|
||||||
users.groups.tinyquiz = {};
|
|
||||||
users.users.tinyquiz = {
|
|
||||||
description = "Tinyquiz service user";
|
|
||||||
group = "tinyquiz";
|
|
||||||
isSystemUser = true;
|
|
||||||
};
|
|
||||||
systemd.services.tinyquiz = {
|
systemd.services.tinyquiz = {
|
||||||
description = "Tinyquiz service";
|
description = "Tinyquiz service";
|
||||||
wantedBy = [ "multi-user.target" ];
|
wantedBy = [ "multi-user.target" ];
|
||||||
@@ -73,6 +67,7 @@
|
|||||||
serviceConfig = {
|
serviceConfig = {
|
||||||
ExecStart = "${self.packages.x86_64-linux.tinyquiz-web}/bin/web";
|
ExecStart = "${self.packages.x86_64-linux.tinyquiz-web}/bin/web";
|
||||||
User = "tinyquiz";
|
User = "tinyquiz";
|
||||||
|
DynamicUser = true;
|
||||||
};
|
};
|
||||||
environment = cfg.config;
|
environment = cfg.config;
|
||||||
};
|
};
|
||||||
|
|||||||
Reference in New Issue
Block a user