ldap: fix permissions for backend scripts

This commit is contained in:
silver 2023-08-05 23:08:52 +01:00
parent 5a6928fbd3
commit 43de0b8da9

View file

@ -68,7 +68,7 @@
USERS_BANNED = lib.strings.concatStringsSep "," cfg.users.banned;
};
service_name = script: lib.strings.sanitizeDerivationName("${cfg.prefix}${cfg.user}@${script}");
service_name = script: lib.strings.sanitizeDerivationName("${cfg.user}@${script}");
# oneshot scripts to run
serviceGenerator = mapAttrs' (script: time: nameValuePair (service_name script) {
@ -79,7 +79,8 @@
serviceConfig = {
Type = "oneshot";
DynamicUser = true;
User = "${cfg.user}";
Group = "${cfg.user}";
ExecStart = "${self.defaultPackage."${system}"}/bin/${script}";
EnvironmentFile = "${cfg.envFile}";
};
@ -179,7 +180,7 @@
home = mkOption rec {
type = types.str;
default = "/etc/skynet_${package_name}";
default = "/etc/${cfg.prefix}${package_name}";
description = "The home for the user";
};