fix for kage group and user definition

This commit is contained in:
Nathan Anderson 2024-03-18 19:50:59 -06:00
parent 47629ac5df
commit 6183e24f9a
2 changed files with 6 additions and 2 deletions

View File

@ -35,7 +35,7 @@
# change ownership of kage to be open # change ownership of kage to be open
systemd.tmpfiles.rules = [ systemd.tmpfiles.rules = [
"d /nfs_export/kage 0777 kage kage - -" "d /nfs_export/kage 0777 kage users - -"
]; ];
swapDevices = [ ]; swapDevices = [ ];

View File

@ -94,7 +94,7 @@ in
enable = true; enable = true;
exports = '' exports = ''
${srvConfig.nfsRoot} ${srvConfig.nfsIpExport}(rw,fsid=root,no_subtree_check) ${srvConfig.nfsRoot} ${srvConfig.nfsIpExport}(rw,fsid=root,no_subtree_check)
${lib.concatMapStringsSep "\n" (n: "${srvConfig.nfsRoot}${n} ${srvConfig.nfsIpExport}(rw,sync,no_subtree_check,all_squash,anongid=100)") srvConfig.nfsExports} ${lib.concatMapStringsSep "\n" (n: "${srvConfig.nfsRoot}${n} ${srvConfig.nfsIpExport}(rw,sync,no_subtree_check,all_squash,anongid=105,anonuid=1005)") srvConfig.nfsExports}
''; '';
}; };
# nfs port TODO make dependant on option enabled # nfs port TODO make dependant on option enabled
@ -102,7 +102,11 @@ in
# 8384 - syncthing # 8384 - syncthing
networking.firewall.allowedTCPPorts = [ 80 2049 8384 ]; networking.firewall.allowedTCPPorts = [ 80 2049 8384 ];
users.groups.kage = {
gid = 105;
};
users.users.kage = { users.users.kage = {
uid = 1005;
isSystemUser = true; isSystemUser = true;
initialPassword = "password"; initialPassword = "password";
description = "user to manage nfs and syncthing tasks"; description = "user to manage nfs and syncthing tasks";