nixos/nomad: only set User if privileges are dropped

2021-01-23 18:20:17 -05:00 · 2021-01-23 18:20:17 -05:00 · 2a3cb407b0
parent de71f5b506
commit 2a3cb407b0
1 changed files with 1 additions and 1 deletions
--- a/nixos/modules/services/networking/nomad.nix
+++ b/nixos/modules/services/networking/nomad.nix
@ -137,7 +137,7 @@ in
          Restart = "on-failure";
          RestartSec = 2;
          TasksMax = "infinity";
-          User = "nomad";
+          User = optionalString cfg.dropPrivileges "nomad";
        }
        (mkIf cfg.enableDocker {
          SupplementaryGroups = "docker"; # space-separated string