ma treewide: make 21.05 compatible (is*User, other fixes)
This commit is contained in:
parent
771ea66091
commit
e7bf265a85
|
@ -43,7 +43,6 @@ in {
|
|||
<stockholm/makefu/2configs/tools/dev.nix>
|
||||
<stockholm/makefu/2configs/tools/desktop.nix>
|
||||
<stockholm/makefu/2configs/tools/mobility.nix>
|
||||
{ environment.systemPackages = [ pkgs.esniper ]; }
|
||||
#<stockholm/makefu/2configs/graphite-standalone.nix>
|
||||
#<stockholm/makefu/2configs/share-user-sftp.nix>
|
||||
|
||||
|
@ -141,6 +140,7 @@ in {
|
|||
];
|
||||
makefu.full-populate = true;
|
||||
nixpkgs.config.allowUnfree = true;
|
||||
users.users.share.isNormalUser = true;
|
||||
users.groups.share = {
|
||||
gid = (import <stockholm/lib>).genid "share";
|
||||
members = [ "makefu" "misa" ];
|
||||
|
@ -152,6 +152,7 @@ in {
|
|||
users.users.misa = {
|
||||
uid = 9002;
|
||||
name = "misa";
|
||||
isNormalUser = true;
|
||||
};
|
||||
|
||||
zramSwap.enable = true;
|
||||
|
|
|
@ -41,8 +41,8 @@ in
|
|||
services.tor = {
|
||||
enable = true;
|
||||
hiddenServices."${name}".map = [
|
||||
{ port = "80"; }
|
||||
# { port = "443"; toHost = "blog.binaergewitter.de"; }
|
||||
{ port = 80; }
|
||||
# { port = 443; toHost = "blog.binaergewitter.de"; }
|
||||
];
|
||||
};
|
||||
}
|
||||
|
|
|
@ -75,7 +75,7 @@ in {
|
|||
};
|
||||
};
|
||||
services.redis.enable = true;
|
||||
systemd.services.redis.serviceConfig.LimitNOFILE=65536;
|
||||
systemd.services.redis.serviceConfig.LimitNOFILE=mkForce "65536";
|
||||
services.postgresql = {
|
||||
enable = true;
|
||||
# Ensure the database, user, and permissions always exist
|
||||
|
|
|
@ -7,6 +7,11 @@ in {
|
|||
virtualHost = fqdn;
|
||||
selfUrlPath = "https://${fqdn}";
|
||||
};
|
||||
|
||||
nixpkgs.config.permittedInsecurePackages = [
|
||||
"python2.7-Pillow-6.2.2"
|
||||
];
|
||||
|
||||
systemd.services.tt-rss.serviceConfig.ExecStart = lib.mkForce "${pkgs.php}/bin/php /var/lib/tt-rss/update_daemon2.php";
|
||||
services.postgresql.package = pkgs.postgresql_9_6;
|
||||
state = [ config.services.postgresqlBackup.location ];
|
||||
|
|
|
@ -26,7 +26,10 @@ in
|
|||
];
|
||||
user = "metube";
|
||||
};
|
||||
users.users.metube.uid = uid;
|
||||
users.users.metube = {
|
||||
uid = uid;
|
||||
isSystemUser = true;
|
||||
};
|
||||
|
||||
systemd.services.docker-metube.serviceConfig = {
|
||||
StandardOutput = lib.mkForce "journal";
|
||||
|
|
|
@ -20,7 +20,7 @@ in
|
|||
services.zigbee2mqtt = {
|
||||
enable = true;
|
||||
inherit dataDir;
|
||||
config = {
|
||||
settings = {
|
||||
permit_join = true;
|
||||
serial.port = "/dev/cc2531";
|
||||
homeassistant = true;
|
||||
|
|
|
@ -7,6 +7,7 @@
|
|||
description = "smb guest user";
|
||||
home = "/data/lanparty";
|
||||
createHome = true;
|
||||
isNormalUser = true;
|
||||
};
|
||||
services.samba = {
|
||||
enable = true;
|
||||
|
|
|
@ -1,11 +1,12 @@
|
|||
{config,...}:{
|
||||
nix.trustedUsers = [ "nixBuild" ];
|
||||
users.users.nixBuild = {
|
||||
name = "nixBuild";
|
||||
useDefaultShell = true;
|
||||
openssh.authorizedKeys.keys = [
|
||||
config.krebs.users.buildbotSlave.pubkey
|
||||
config.krebs.users.makefu-remote-builder.pubkey
|
||||
];
|
||||
};
|
||||
name = "nixBuild";
|
||||
isNormalUser = true;
|
||||
useDefaultShell = true;
|
||||
openssh.authorizedKeys.keys = [
|
||||
config.krebs.users.buildbotSlave.pubkey
|
||||
config.krebs.users.makefu-remote-builder.pubkey
|
||||
];
|
||||
};
|
||||
}
|
||||
|
|
|
@ -5,6 +5,7 @@
|
|||
share = {
|
||||
uid = 9002;
|
||||
home = "/var/empty";
|
||||
isNormalUser = true;
|
||||
openssh.authorizedKeys.keys = [ config.krebs.users.makefu.pubkey ];
|
||||
};
|
||||
};
|
||||
|
|
|
@ -11,7 +11,10 @@ in {
|
|||
# home = "/var/empty";
|
||||
# };
|
||||
environment.systemPackages = [ pkgs.samba ];
|
||||
users.users.download.uid = genid "download";
|
||||
users.users.download = {
|
||||
uid = genid "download";
|
||||
isNormalUser = true;
|
||||
};
|
||||
services.samba = {
|
||||
enable = true;
|
||||
shares = {
|
||||
|
|
|
@ -4,6 +4,7 @@
|
|||
uid = config.ids.uids.smbguest;
|
||||
group = "share";
|
||||
description = "smb guest user";
|
||||
isNormalUser = true;
|
||||
home = "/var/empty";
|
||||
};
|
||||
users.groups.share.members = [ "makefu" ];
|
||||
|
|
|
@ -50,6 +50,7 @@ let
|
|||
# TODO only create if user is ps3netsrv
|
||||
users.users.ps3netsrv = {
|
||||
uid = genid "ps3netsrv";
|
||||
isSystemUser = true;
|
||||
};
|
||||
users.groups.ps3netsrv.gid = genid "ps3netsrv";
|
||||
};
|
||||
|
|
|
@ -1,6 +1,6 @@
|
|||
{ go_1_14, buildGoPackage, fetchFromGitHub }:
|
||||
{ buildGoPackage, fetchFromGitHub }:
|
||||
let
|
||||
builder = buildGoPackage.override { go = go_1_14; };
|
||||
builder = buildGoPackage;
|
||||
in
|
||||
builder rec {
|
||||
name = "shiori-${version}";
|
||||
|
|
Loading…
Reference in a new issue