zuckerberg/nix-config
zuckerberg/nix-config
1
0
Fork 0
Code Issues Pull Requests Actions Activity

Shared group/user for consistent permissions+access

Browse Source
This commit is contained in:
Zuckerberg 2022-04-17 23:43:42 -04:00
parent 6233ce6c0d
commit e15b612b3c
2 changed files with 20 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
common/server/samba.nix
View File

@ -34,7 +34,7 @@
"guest ok" = "yes";
"create mask" = "0644";
"directory mask" = "0755";
"force user" = "googlebot";
"force user" = "public_data";
"force group" = "public_data";
};
private = {
@ -84,5 +84,10 @@
];
users.groups.public_data.gid = 994;
users.users.public_data = {
isSystemUser = true;
group = "public_data";
uid = 994;
};
};
}

16
machines/storage/s0/configuration.nix
View File

@ -57,10 +57,18 @@
containers.vpn = mkVpnContainer pkgs "/data/samba/Public/Plex" {
services.prowlarr.enable = true;
services.sonarr.enable = true;
services.sonarr.user = "public_data";
services.sonarr.group = "public_data";
services.bazarr.enable = true;
services.bazarr.user = "public_data";
services.bazarr.group = "public_data";
services.radarr.enable = true;
services.radarr.user = "public_data";
services.radarr.group = "public_data";
services.lidarr.enable = true;
users.groups.transmission.members = [ "prowlarr" "sonarr" "bazarr" "radarr" "lidarr" ];
services.lidarr.user = "public_data";
services.lidarr.group = "public_data";
users.groups.transmission.members = [ "sonarr" "bazarr" "radarr" "lidarr" ];
services.transmission = {
enable = true;
performanceNetParameters = true;
@ -107,8 +115,12 @@
"download-queue-size" = 20; # gotta go fast
};
};
users.groups.public_data.members = [ "prowlarr" "sonarr" "bazarr" "radarr" "lidarr" "transmission" ];
users.groups.public_data.gid = 994;
users.users.public_data = {
isSystemUser = true;
group = "public_data";
uid = 994;
};
};
# containers cannot unlock their own secrets right now. unlock it here
age.secrets."pia-login.conf".file = ../../../secrets/pia-login.conf;