cultist.club/cultist.club
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat: static ergo user

Browse source
This commit is contained in:
Lain Iwakura 2026-05-19 23:01:24 +03:00
parent 8f14f5da32
commit 636b19160d
Signed by: lain
GPG key ID: 8160466B2E8D1441
1 changed files with 8 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

9
services/ergo/default.nix
View file

@ -53,7 +53,14 @@
systemd.services.ergochat = {
after = [ "acme-finished-cultist.club.target" ];
wants = [ "acme-finished-cultist.club.target" ];
serviceConfig.SupplementaryGroups = [ "acme" ];
serviceConfig = {
DynamicUser = lib.mkForce false;
User = "ergochat";
Group = "ergochat";
SupplementaryGroups = [ "acme" ];
StateDirectory = "ergo";
ReadOnlyPaths = [ "/var/lib/acme/cultist.club" ];
};
};
security.acme.certs."cultist.club".postRun = "systemctl restart ergochat.service";