try to fix ids

This commit is contained in:
2023-12-05 11:19:28 +01:00
parent 1030766305
commit 4832fcea2f
3 changed files with 10 additions and 10 deletions

View File

@@ -12,7 +12,7 @@
./utils/modules/netdata.nix ./utils/modules/netdata.nix
# fw # fw
./modules/statidids.nix ./modules/staticids.nix
./modules/networking.nix ./modules/networking.nix
./modules/firewall.nix ./modules/firewall.nix
./modules/dhcp4.nix ./modules/dhcp4.nix

View File

@@ -4,24 +4,24 @@ let
in in
{ {
options = { options = {
container-ids.uids = lib.mkOption { cids.uids = lib.mkOption {
internal = true; internal = true;
description = lib.mdDoc '' description = lib.mdDoc ''
The user IDs used in NixOS. The user IDs used for containers.
''; '';
type = types.attrsOf types.int; type = types.attrsOf types.int;
}; };
container-ids.gids = lib.mkOption { cids.gids = lib.mkOption {
internal = true; internal = true;
description = lib.mdDoc '' description = lib.mdDoc ''
The group IDs used in NixOS. The group IDs used for containers.
''; '';
type = types.attrsOf types.int; type = types.attrsOf types.int;
}; };
}; };
config = { config = {
container-ids = { cids = {
uids = { uids = {
unbound = 10001; unbound = 10001;
}; };

View File

@@ -133,10 +133,10 @@ in {
users.users.unbound = { users.users.unbound = {
group = "unbound"; group = "unbound";
isSystemUser = true; isSystemUser = true;
uid = config.container-ids.uids.unbound; uid = config.cids.uids.unbound;
}; };
users.groups.unbound = { users.groups.unbound = {
gid = config.container-ids.gids.unbound; gid = config.cids.gids.unbound;
}; };
security.acme.certs."${domain}" = { security.acme.certs."${domain}" = {
@@ -175,10 +175,10 @@ in {
users.users.unbound = { users.users.unbound = {
group = "unbound"; group = "unbound";
isSystemUser = true; isSystemUser = true;
uid = config.container-ids.uids.unbound; uid = config.cids.uids.unbound;
}; };
users.groups.unbound = { users.groups.unbound = {
gid = config.container-ids.gids.unbound; gid = config.cids.gids.unbound;
}; };
services.unbound = { services.unbound = {
enable = true; enable = true;