restic: rename user
the restic rest server module uses a restic user
This commit is contained in:
parent
d8da0af6ac
commit
3899927ced
2 changed files with 6 additions and 6 deletions
|
|
@ -43,7 +43,7 @@
|
||||||
|
|
||||||
services.restic.backups = {
|
services.restic.backups = {
|
||||||
main = {
|
main = {
|
||||||
user = "restic";
|
user = "restic-backup";
|
||||||
package = pkgs.writeShellScriptBin "restic" ''
|
package = pkgs.writeShellScriptBin "restic" ''
|
||||||
exec /run/wrappers/bin/restic "$@"
|
exec /run/wrappers/bin/restic "$@"
|
||||||
'';
|
'';
|
||||||
|
|
|
||||||
|
|
@ -3,17 +3,17 @@
|
||||||
{
|
{
|
||||||
# make wrapper to run restic rootless
|
# make wrapper to run restic rootless
|
||||||
users = {
|
users = {
|
||||||
users.restic = {
|
users.restic-backup = {
|
||||||
group = "restic";
|
group = "restic-backup";
|
||||||
isSystemUser = true;
|
isSystemUser = true;
|
||||||
};
|
};
|
||||||
groups.restic = {};
|
groups.restic-backup = {};
|
||||||
};
|
};
|
||||||
|
|
||||||
security.wrappers.restic = {
|
security.wrappers.restic = {
|
||||||
source = lib.getExe pkgs.restic;
|
source = lib.getExe pkgs.restic;
|
||||||
owner = "restic";
|
owner = "restic-backup";
|
||||||
group = "restic";
|
group = "restic-backup";
|
||||||
permissions = "500";
|
permissions = "500";
|
||||||
capabilities = "cap_dac_read_search+ep";
|
capabilities = "cap_dac_read_search+ep";
|
||||||
};
|
};
|
||||||
|
|
|
||||||
Loading…
Add table
Add a link
Reference in a new issue