test
This commit is contained in:
@@ -3,8 +3,8 @@ let
|
|||||||
inherit (lib) types;
|
inherit (lib) types;
|
||||||
in
|
in
|
||||||
{
|
{
|
||||||
options = {
|
options.containers = {
|
||||||
cids.uids = lib.mkOption {
|
ids.uids = lib.mkOption {
|
||||||
internal = true;
|
internal = true;
|
||||||
description = lib.mdDoc ''
|
description = lib.mdDoc ''
|
||||||
The user IDs used for containers.
|
The user IDs used for containers.
|
||||||
@@ -12,7 +12,7 @@ in
|
|||||||
type = types.attrsOf types.int;
|
type = types.attrsOf types.int;
|
||||||
};
|
};
|
||||||
|
|
||||||
cids.gids = lib.mkOption {
|
ids.gids = lib.mkOption {
|
||||||
internal = true;
|
internal = true;
|
||||||
description = lib.mdDoc ''
|
description = lib.mdDoc ''
|
||||||
The group IDs used for containers.
|
The group IDs used for containers.
|
||||||
@@ -21,7 +21,7 @@ in
|
|||||||
};
|
};
|
||||||
};
|
};
|
||||||
config = {
|
config = {
|
||||||
cids = {
|
containers.ids = {
|
||||||
uids = {
|
uids = {
|
||||||
unbound = 10001;
|
unbound = 10001;
|
||||||
};
|
};
|
||||||
|
|||||||
@@ -133,10 +133,10 @@ in {
|
|||||||
users.users.unbound = {
|
users.users.unbound = {
|
||||||
group = "unbound";
|
group = "unbound";
|
||||||
isSystemUser = true;
|
isSystemUser = true;
|
||||||
uid = config.cids.uids.unbound;
|
uid = config.containers.ids.uids.unbound;
|
||||||
};
|
};
|
||||||
users.groups.unbound = {
|
users.groups.unbound = {
|
||||||
gid = config.cids.gids.unbound;
|
gid = config.containers.ids.gids.unbound;
|
||||||
};
|
};
|
||||||
|
|
||||||
security.acme.certs."${domain}" = {
|
security.acme.certs."${domain}" = {
|
||||||
@@ -175,10 +175,10 @@ in {
|
|||||||
users.users.unbound = {
|
users.users.unbound = {
|
||||||
group = "unbound";
|
group = "unbound";
|
||||||
isSystemUser = true;
|
isSystemUser = true;
|
||||||
uid = config.cids.uids.unbound;
|
uid = config.containers.ids.uids.unbound;
|
||||||
};
|
};
|
||||||
users.groups.unbound = {
|
users.groups.unbound = {
|
||||||
gid = config.cids.gids.unbound;
|
gid = config.containers.ids.gids.unbound;
|
||||||
};
|
};
|
||||||
services.unbound = {
|
services.unbound = {
|
||||||
enable = true;
|
enable = true;
|
||||||
|
|||||||
Reference in New Issue
Block a user