fix agenix secrets for actual budget

This commit is contained in:
pazpi 2026-04-14 16:23:58 +02:00
parent 3591da2c95
commit 9ad00da92a
No known key found for this signature in database

View file

@ -51,6 +51,15 @@ in
config = lib.mkMerge [ config = lib.mkMerge [
(lib.mkIf cfg.enable { (lib.mkIf cfg.enable {
# Upstream services.actual uses DynamicUser; without a static passwd entry,
# activation-time chown (e.g. agenix) for owner "actual" fails.
users.groups.actual = { };
users.users.actual = {
isSystemUser = true;
group = "actual";
description = "Actual Budget server";
};
services.actual = { services.actual = {
enable = true; enable = true;
openFirewall = true; openFirewall = true;