fix agenix secrets for actual budget
This commit is contained in:
parent
3591da2c95
commit
9ad00da92a
1 changed files with 9 additions and 0 deletions
|
|
@ -51,6 +51,15 @@ in
|
||||||
|
|
||||||
config = lib.mkMerge [
|
config = lib.mkMerge [
|
||||||
(lib.mkIf cfg.enable {
|
(lib.mkIf cfg.enable {
|
||||||
|
# Upstream services.actual uses DynamicUser; without a static passwd entry,
|
||||||
|
# activation-time chown (e.g. agenix) for owner "actual" fails.
|
||||||
|
users.groups.actual = { };
|
||||||
|
users.users.actual = {
|
||||||
|
isSystemUser = true;
|
||||||
|
group = "actual";
|
||||||
|
description = "Actual Budget server";
|
||||||
|
};
|
||||||
|
|
||||||
services.actual = {
|
services.actual = {
|
||||||
enable = true;
|
enable = true;
|
||||||
openFirewall = true;
|
openFirewall = true;
|
||||||
|
|
|
||||||
Loading…
Add table
Add a link
Reference in a new issue