@cryptotaxi247 / infra-1 / commits / bcf55e94

{packet-sd,github-exporter,spot-price-exporter,rfc39}: mark them as system users, set their group

Graham Christensen committed Dec 18, 2021 at 21:57 UTC bcf55e94c05202c9acf109b36c7ee870e422efde
4 files changed +18 -5
delft/eris.nix
+4 -1
@@ -539,9 +539,12 @@ in {
539 user = "packet-sd";
540 };
541
542 - users.extraUsers.packet-sd = {
542 + users.users.packet-sd = {
543 description = "Prometheus Packet Service Discovery";
544 + isSystemUser = true;
545 + group = "packet-sd";
546 };
547 + users.groups.packet-sd = {};
548
549 systemd.tmpfiles.rules = [
550 "d /var/lib/packet-sd 0755 packet-sd - -"
delft/eris/github-project-monitor.nix
+4 -1
@@ -15,9 +15,12 @@ let
15 ];
16 });
17 in {
18 - users.extraUsers.github-exporter = {
18 + users.users.github-exporter = {
19 description = "Prometheus Github Exporter";
20 + isSystemUser = true;
21 + group = "github-exporter";
22 };
23 + users.groups.github-exporter = {};
24
25 systemd.services.prometheus-github-exporter = {
26 wantedBy = [ "multi-user.target" ];
delft/eris/packet-spot-market-prices.nix
+5 -2
@@ -12,9 +12,12 @@ in {
12 user = "spot-price-exporter";
13 };
14
15 - users.extraUsers.spot-price-exporter = {
15 + users.users.spot-price-exporter = {
16 description = "Prometheus Packet Spot Market Price Exporter";
17 + isSystemUser = true;
18 + group = "spot-price-exporter";
19 };
20 + users.groups.spot-price-exporter = {};
21
22 systemd.services.prometheus-packet-spot-market-price-exporter = {
23 wantedBy = [ "multi-user.target" ];
@@ -33,4 +36,4 @@ in {
36
37 script = "exec python3 ${exporter}/scrape.py /run/keys/prometheus-packet-spot-market-price-exporter";
38 };
36 -}
\ No newline at end of file
39 +}
modules/rfc39.nix
+5 -1
@@ -18,11 +18,15 @@ in {
18 user = "rfc39";
19 };
20
21 - users.extraUsers.rfc39 = {
21 + users.users.rfc39 = {
22 description = "RFC39 Maintainer Team Sync";
23 home = "/var/lib/rfc39-sync";
24 createHome = true;
25 + isSystemUser = true;
26 + group = "rfc39";
27 };
28 + users.groups.rfc39 = {};
29 +
30
31 programs.ssh.knownHosts."github.com".publicKey = "ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAq2A7hRGmdnm9tUDbO9IDSwBK6TbQa+PXYPCPy6rbTrTtw7PHkccKrpp0yVhp5HdEIcKr6pLlVDBfOLX9QUsyCOV0wzfjIJNlGEYsdlLJizHhbn2mUjvSAHQqZETYP81eFzLQNnPHt4EVVUh7VfDESU84KezmD5QlWpXLmvU31/yMf+Se8xhHTvKSCZIFImWwoG6mbUoWf9nzpIoaSjB+weqqUUmpaaasXVal72J+UX2B+2RPW3RcT0eOzQgqlJL3RKrTJvdsjE3JEAvGq3lGHSZXy28G3skua2SmVi/w4yCE6gbODqnTWlg7+wC604ydGXA8VJiS5ap43JXiUFFAaQ==";
32