fix for kage group and user definition

This commit is contained in:
Nathan Anderson 2024-03-18 19:50:59 -06:00
parent 47629ac5df
commit 6183e24f9a
2 changed files with 6 additions and 2 deletions

View File

@ -35,7 +35,7 @@
# change ownership of kage to be open
systemd.tmpfiles.rules = [
"d /nfs_export/kage 0777 kage kage - -"
"d /nfs_export/kage 0777 kage users - -"
];
swapDevices = [ ];

View File

@ -94,7 +94,7 @@ in
enable = true;
exports = ''
${srvConfig.nfsRoot} ${srvConfig.nfsIpExport}(rw,fsid=root,no_subtree_check)
${lib.concatMapStringsSep "\n" (n: "${srvConfig.nfsRoot}${n} ${srvConfig.nfsIpExport}(rw,sync,no_subtree_check,all_squash,anongid=100)") srvConfig.nfsExports}
${lib.concatMapStringsSep "\n" (n: "${srvConfig.nfsRoot}${n} ${srvConfig.nfsIpExport}(rw,sync,no_subtree_check,all_squash,anongid=105,anonuid=1005)") srvConfig.nfsExports}
'';
};
# nfs port TODO make dependant on option enabled
@ -102,7 +102,11 @@ in
# 8384 - syncthing
networking.firewall.allowedTCPPorts = [ 80 2049 8384 ];
users.groups.kage = {
gid = 105;
};
users.users.kage = {
uid = 1005;
isSystemUser = true;
initialPassword = "password";
description = "user to manage nfs and syncthing tasks";