nixpkgs/nixos/modules
rnhmjoj 9e0457115e
nixos/mautrix-whatsapp: use static user and group
The DynamicUser mechanism does not allow share the bridge
registration.yaml file with matrix-synapse in any easy way:

1. the mautrix-whatsapp group under which the service runs is not in
   /etc/group, so you can't add matrix-synapse to this.
   This makes the group read bit on the file useless as the group is
   effectively always empty.

2. It's not possible to use ACLs or copy the file during preStart or
   postStart because the commands are executed with low priviledges.

By using a normal (static) user/group the secret can be shared with
synapse as follows:

  services.matrix_synapse.settings.app_service_config_files =
    [ "/var/lib/mautrix-whatsapp/whatsapp-registration.yaml" ];

  users.users.matrix-synapse.extraGroups = [ "mautrix-whatsapp" ];
2023-09-04 00:40:50 +02:00
..
config Merge pull request #246772 from R-VdP/nixos-user-expiry 2023-08-26 02:41:34 +02:00
hardware Merge pull request #244060 from Gerg-L/nvidiaDynamicBoost 2023-08-10 17:02:26 +02:00
i18n/input-method nixos/fcitx5: fix evaluation 2023-08-15 08:15:41 +08:00
image modules/image/repart: Fix stripNixStorePrefix 2023-08-22 13:09:03 +02:00
installer Merge pull request #248701 from doronbehar/nixos/manpages 2023-08-16 15:49:49 +00:00
misc nixos/doc: Improve documentation of documentation 2023-08-12 22:28:04 +03:00
profiles nixos/installation-device: allow nix-copy for root/nixos user 2023-08-07 16:48:49 +02:00
programs Merge pull request #234615 from linsui/dconf 2023-08-28 18:31:52 +02:00
security Revert "nixos/security/wrappers: simplifications and a fix for #98863" 2023-08-24 08:35:11 +02:00
services nixos/mautrix-whatsapp: use static user and group 2023-09-04 00:40:50 +02:00
system Merge pull request #247153 from Artturin/fixwarning1 2023-09-02 03:13:30 +03:00
tasks zfs: 'want', don't 'require', systemd-udev-settle 2023-07-28 16:57:12 +10:00
testing Merge pull request #219106 from m-bdf/nixos-testing-increase-device-timeout 2023-06-20 11:48:45 +02:00
virtualisation Merge master into staging-next 2023-08-19 00:01:42 +00:00
module-list.nix nixos/nncp: add caller and daemon services 2023-08-29 21:31:19 +01:00
rename.nix nixos/dhcp(46): remove 2023-07-28 16:35:40 +02:00