1
0
forked from clan/clan-infra

matrix-bot.nix: Fix dynamic user to static user

This commit is contained in:
Luis Hebendanz 2024-07-03 19:35:02 +02:00
parent b99cbbaa4c
commit efe12541fe
2 changed files with 16 additions and 7 deletions

View File

@ -9,6 +9,15 @@ let
name = "matrix-bot";
in
{
users.groups.matrix-bot-user = { };
users.users.matrix-bot-user = {
group = "matrix-bot-user";
isSystemUser = true;
description = "User for matrix-bot service";
home = "/var/lib/matrix-bot";
createHome = true;
};
systemd.services.${name} = {
path = [ self.packages.${pkgs.system}.matrix-bot ];
description = "Matrix bot for changelog and reviews";
@ -17,7 +26,7 @@ in
environment = {
MATRIX_PASSWORD_FILE = "%d/MATRIX_PASSWORD_FILE";
OPENAI_API_KEY_FILE = "%d/OPENAI_API_KEY_FILE";
HOME = "/run/${name}";
HOME = "/var/lib/${name}";
};
serviceConfig = {
@ -25,9 +34,10 @@ in
"MATRIX_PASSWORD_FILE:${config.sops.secrets.web01-matrix-password-clan-bot.path}"
"OPENAI_API_KEY_FILE:${config.sops.secrets.qubasas-openai-api-key.path}"
];
DynamicUser = true;
RuntimeDirectory = "${name}";
WorkingDirectory = "/run/${name}";
User = "matrix-bot-user";
Group = "matrix-bot-user";
WorkingDirectory = "/var/lib/${name}";
RuntimeDirectory = "/var/lib/${name}";
};
script = ''

View File

@ -175,10 +175,9 @@ Follow these guidelines:
- Mention each scope and pull request number only once
- Have these headers in the changelog if applicable:
- New Features
- Bug Fixes
- Refactoring
- Documentation
- Removed Features
- Refactoring
- Bug Fixes
- Other Changes
Changelog: