summary refs log tree commit diff
path: root/nixos/modules/services/networking/tinc.nix
diff options
context:
space:
mode:
authorJörg Thalheim <joerg@thalheim.io>2021-04-15 20:15:44 +0200
committerJörg Thalheim <joerg@thalheim.io>2021-07-18 08:57:14 +0200
commitf3dfc114680d3e191fccdbaed4051b0837647b04 (patch)
treecdc4b69747c7b0e5261327698a267b568d51a9fe /nixos/modules/services/networking/tinc.nix
parent0839cf1d45bc216bd83eef75296aa3b8835c8135 (diff)
nixos/tinc: don't run as nogroup
Diffstat (limited to 'nixos/modules/services/networking/tinc.nix')
-rw-r--r--nixos/modules/services/networking/tinc.nix5
1 files changed, 4 insertions, 1 deletions
diff --git a/nixos/modules/services/networking/tinc.nix b/nixos/modules/services/networking/tinc.nix
index b6afd83a9abd8..f71bc6e1e585a 100644
--- a/nixos/modules/services/networking/tinc.nix
+++ b/nixos/modules/services/networking/tinc.nix
@@ -427,9 +427,12 @@ in
       nameValuePair ("tinc.${network}") ({
         description = "Tinc daemon user for ${network}";
         isSystemUser = true;
+        group = "tinc.${network}";
       })
     );
-
+    users.groups = flip mapAttrs' cfg.networks (network: _:
+      nameValuePair "tinc.${network}" {}
+    );
   };
 
   meta.maintainers = with maintainers; [ minijackson ];