wip uid/gid mapping

2026-01-17 13:36:51 -06:00
parent 1b76039f49
commit 20c8d082eb
20 changed files with 125 additions and 29 deletions
--- a/modules/servers/vaultwarden.nix
+++ b/modules/servers/vaultwarden.nix
@@ -7,11 +7,20 @@
 let
  cfg = config.my.servers.vaultwarden;
  setup = import ../factories/mkserver.nix { inherit lib config; };
+  id = 981;
+  gid = id;
+  uid = id;
 in
 {
  options.my.servers.vaultwarden = setup.mkOptions "vaultwarden" "vault" 8222;
  config = lib.mkIf (cfg.enable && config.my.servers.postgres.enable && config.my.secureHost) {
    sops.secrets.vaultwarden.sopsFile = ../../secrets/env.yaml;
+    users.groups.vaultwarden.gid = { inherit gid; };
+    users.users.vaultwarden = {
+      inherit uid;
+      isSystemUser = true;
+      group = "vaultwarden";
+    };
    services.vaultwarden = {
      inherit (cfg) enable;
      dbBackend = "postgresql";