fix for kage group and user definition
This commit is contained in:
parent
47629ac5df
commit
6183e24f9a
|
@ -35,7 +35,7 @@
|
||||||
|
|
||||||
# change ownership of kage to be open
|
# change ownership of kage to be open
|
||||||
systemd.tmpfiles.rules = [
|
systemd.tmpfiles.rules = [
|
||||||
"d /nfs_export/kage 0777 kage kage - -"
|
"d /nfs_export/kage 0777 kage users - -"
|
||||||
];
|
];
|
||||||
|
|
||||||
swapDevices = [ ];
|
swapDevices = [ ];
|
||||||
|
|
|
@ -94,7 +94,7 @@ in
|
||||||
enable = true;
|
enable = true;
|
||||||
exports = ''
|
exports = ''
|
||||||
${srvConfig.nfsRoot} ${srvConfig.nfsIpExport}(rw,fsid=root,no_subtree_check)
|
${srvConfig.nfsRoot} ${srvConfig.nfsIpExport}(rw,fsid=root,no_subtree_check)
|
||||||
${lib.concatMapStringsSep "\n" (n: "${srvConfig.nfsRoot}${n} ${srvConfig.nfsIpExport}(rw,sync,no_subtree_check,all_squash,anongid=100)") srvConfig.nfsExports}
|
${lib.concatMapStringsSep "\n" (n: "${srvConfig.nfsRoot}${n} ${srvConfig.nfsIpExport}(rw,sync,no_subtree_check,all_squash,anongid=105,anonuid=1005)") srvConfig.nfsExports}
|
||||||
'';
|
'';
|
||||||
};
|
};
|
||||||
# nfs port TODO make dependant on option enabled
|
# nfs port TODO make dependant on option enabled
|
||||||
|
@ -102,7 +102,11 @@ in
|
||||||
# 8384 - syncthing
|
# 8384 - syncthing
|
||||||
networking.firewall.allowedTCPPorts = [ 80 2049 8384 ];
|
networking.firewall.allowedTCPPorts = [ 80 2049 8384 ];
|
||||||
|
|
||||||
|
users.groups.kage = {
|
||||||
|
gid = 105;
|
||||||
|
};
|
||||||
users.users.kage = {
|
users.users.kage = {
|
||||||
|
uid = 1005;
|
||||||
isSystemUser = true;
|
isSystemUser = true;
|
||||||
initialPassword = "password";
|
initialPassword = "password";
|
||||||
description = "user to manage nfs and syncthing tasks";
|
description = "user to manage nfs and syncthing tasks";
|
||||||
|
|
Loading…
Reference in New Issue
Block a user