cafkafk/nixpkgs
cafkafk/nixpkgs
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions 2

nixos/nebula: conditionally provision the nebula user

Browse source
This commit is contained in:
Aaron Andersen 2021-02-09 20:48:23 -05:00
parent b52a8f67dd
commit 9f9e7c181c
1 changed files with 9 additions and 7 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

16
nixos/modules/services/networking/nebula.nix
View file

@ -192,13 +192,15 @@ in
networking.firewall.allowedUDPPorts = [ cfg.listen.port ]; networking.firewall.allowedUDPPorts = [ cfg.listen.port ];
# Create the service user and its group. # Create the service user and its group.
users.users."nebula" = { users = mkIf cfg.tun.disable {
name = "nebula"; users.nebula = {
group = "nebula"; group = "nebula";
description = "Nebula service user"; description = "Nebula service user";
isSystemUser = true; isSystemUser = true;
packages = [ cfg.package ]; packages = [ cfg.package ];
};
groups.nebula = {};
}; };
users.groups."nebula" = {};
}; };
} }