From 005addff1b49c4113539c053b2a811bb29620146 Mon Sep 17 00:00:00 2001
From: Danilo Reyes <danilo.reyes.251@proton.me>
Date: Fri, 6 Feb 2026 08:21:24 -0600
Subject: [PATCH] create www-data

---
 hosts/vps/configuration.nix | 10 ++++++++++
 1 file changed, 10 insertions(+)

diff --git a/hosts/vps/configuration.nix b/hosts/vps/configuration.nix
index f2fc37e..cc956ef 100644
--- a/hosts/vps/configuration.nix
+++ b/hosts/vps/configuration.nix
@@ -1,6 +1,7 @@
 {
   config,
   lib,
+  pkgs,
   inputs,
   ...
 }:
@@ -134,16 +135,25 @@ in
     groups = {
       deploy = { };
       lidarr-reports = { };
+      www-data = { };
     };
     users = {
+      nginx.extraGroups = [ "www-data" ];
       deploy = {
         isSystemUser = true;
         group = "deploy";
+        home = "/var/lib/deploy";
+        createHome = true;
+        shell = pkgs.bashInteractive;
+        extraGroups = [ "www-data" ];
         openssh.authorizedKeys.keyFiles = [ ../../secrets/ssh/ed25519_deploy.pub ];
       };
       lidarr-reports = {
         isSystemUser = true;
         group = "lidarr-reports";
+        home = "/var/lib/lidarr-reports";
+        createHome = true;
+        shell = pkgs.bashInteractive;
         openssh.authorizedKeys.keyFiles = [ ../../secrets/ssh/ed25519_lidarr-reports.pub ];
       };
     };