diff --git a/hosts/fw.cloonar.com/modules/staticids.nix b/hosts/fw.cloonar.com/modules/staticids.nix index f38e7ab..0d81cb0 100644 --- a/hosts/fw.cloonar.com/modules/staticids.nix +++ b/hosts/fw.cloonar.com/modules/staticids.nix @@ -3,31 +3,12 @@ let inherit (lib) types; in { - options.cids = { - uids = lib.mkOption { - readOnly = true; - description = lib.mdDoc '' - The user IDs used for containers. - ''; - type = types.attrsOf types.int; + ids = { + uids = { + unbound = 10001; }; - - gids = lib.mkOption { - readOnly = true; - description = lib.mdDoc '' - The group IDs used for containers. - ''; - type = types.attrsOf types.int; - }; - }; - config = { - cids = { - uids = { - unbound = 10001; - }; - gids = { - unbound = 10001; - }; + gids = { + unbound = 10001; }; }; } diff --git a/hosts/fw.cloonar.com/modules/unbound.nix b/hosts/fw.cloonar.com/modules/unbound.nix index a12abf9..03a1d4d 100644 --- a/hosts/fw.cloonar.com/modules/unbound.nix +++ b/hosts/fw.cloonar.com/modules/unbound.nix @@ -1,5 +1,6 @@ { config, ... }: let + cids = import ../modules/staticids.nix; domain = "ns.cloonar.com"; cfg = { server = { @@ -136,7 +137,7 @@ in { uid = cids.uids.unbound; }; users.groups.unbound = { - gid = config.cids.gids.unbound; + gid = cids.gids.unbound; }; security.acme.certs."${domain}" = { @@ -175,10 +176,10 @@ in { users.users.unbound = { group = "unbound"; isSystemUser = true; - uid = config.cids.uids.unbound; + uid = cids.uids.unbound; }; users.groups.unbound = { - gid = config.cids.gids.unbound; + gid = cids.gids.unbound; }; services.unbound = { enable = true;