Skip to content

Commit e60be22

Browse files
committed
[OPS-1404] Use unpriviledged user for swampwalk2
1 parent 777e8fa commit e60be22

File tree

1 file changed

+7
-1
lines changed

1 file changed

+7
-1
lines changed

servers/alzirr/deployment.nix

Lines changed: 7 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -13,6 +13,12 @@ in
1313
regularUsers = [ "diogo" ];
1414
};
1515

16+
users.users.swampwalk = {
17+
isNormalUser = true;
18+
group = "users";
19+
linger = true;
20+
};
21+
1622
environment.systemPackages = with pkgs; [
1723
stack
1824
git
@@ -36,7 +42,7 @@ in
3642
path = [ "/run/wrappers" ];
3743
serviceConfig = {
3844
Restart = "on-failure";
39-
User = "sweater";
45+
User = "swampwalk";
4046
Group = "users";
4147
ExecStart = "${swampwalk2-profile}/bin/swampwalk-server";
4248

0 commit comments

Comments
 (0)