eris: fix go-neb secret ownership
Linus Heckemann committed
Jan 25, 2023 at 17:28 UTC
11fec888ac22c7645508ea9823301805521278ea
1 file changed
+9
-1
delft/eris/alertmanager-matrix-forwarder.nix
+9
-1
@@ -2,9 +2,17 @@
2
{
3
deployment.keys."alertmanager-matrix-forwarder" = {
4
keyFile = /home/deploy/src/nixos-org-configurations/keys/alertmanager-matrix-forwarder;
5
- # user = config.systemd.services.go-neb.serviceConfig.User;
5
+ user = config.systemd.services.go-neb.serviceConfig.User;
6
};
7
8
+ # Create user so that we can set the ownership of the key to
9
+ # it. DynamicUser will not take full effect as a result of this.
10
+ users.users.go-neb = {
11
+ isSystemUser = true;
12
+ group = "go-neb";
13
+ };
14
+ users.groups.go-neb = {};
15
+
16
systemd.services.go-neb.serviceConfig.SupplementaryGroups = [ "keys" ];
17
18
services.go-neb = {