fix for kage group and user definition
This commit is contained in:
		
							parent
							
								
									47629ac5df
								
							
						
					
					
						commit
						6183e24f9a
					
				@ -35,7 +35,7 @@
 | 
			
		||||
 | 
			
		||||
  # change ownership of kage to be open
 | 
			
		||||
  systemd.tmpfiles.rules = [
 | 
			
		||||
    "d /nfs_export/kage 0777 kage kage - -"
 | 
			
		||||
    "d /nfs_export/kage 0777 kage users - -"
 | 
			
		||||
  ];
 | 
			
		||||
 | 
			
		||||
  swapDevices = [ ];
 | 
			
		||||
 | 
			
		||||
@ -94,7 +94,7 @@ in
 | 
			
		||||
      enable = true;
 | 
			
		||||
      exports = ''
 | 
			
		||||
       ${srvConfig.nfsRoot} ${srvConfig.nfsIpExport}(rw,fsid=root,no_subtree_check)
 | 
			
		||||
       ${lib.concatMapStringsSep "\n" (n: "${srvConfig.nfsRoot}${n} ${srvConfig.nfsIpExport}(rw,sync,no_subtree_check,all_squash,anongid=100)") srvConfig.nfsExports}
 | 
			
		||||
       ${lib.concatMapStringsSep "\n" (n: "${srvConfig.nfsRoot}${n} ${srvConfig.nfsIpExport}(rw,sync,no_subtree_check,all_squash,anongid=105,anonuid=1005)") srvConfig.nfsExports}
 | 
			
		||||
     '';
 | 
			
		||||
    };
 | 
			
		||||
    # nfs port TODO make dependant on option enabled
 | 
			
		||||
@ -102,7 +102,11 @@ in
 | 
			
		||||
    # 8384 - syncthing
 | 
			
		||||
    networking.firewall.allowedTCPPorts = [ 80 2049 8384 ];
 | 
			
		||||
 | 
			
		||||
    users.groups.kage = {
 | 
			
		||||
      gid = 105;
 | 
			
		||||
    };
 | 
			
		||||
    users.users.kage = {
 | 
			
		||||
      uid = 1005;
 | 
			
		||||
      isSystemUser = true;
 | 
			
		||||
      initialPassword = "password";
 | 
			
		||||
      description = "user to manage nfs and syncthing tasks";
 | 
			
		||||
 | 
			
		||||
		Loading…
	
		Reference in New Issue
	
	Block a user