Kieran's opinionated (and probably slightly dumb) nix config

feat: allow cachet to be sshed into

dunkirk.sh 98fb52ca f2e21274

verified
Changed files
+13
modules
nixos
services
+13
modules/nixos/services/cachet.nix
···
extraGroups = [ "services" ];
home = cfg.dataDir;
createHome = true;
+
shell = pkgs.bash;
};
users.groups.cachet = { };
+
+
security.sudo.extraRules = [
+
{
+
users = [ "cachet" ];
+
commands = [
+
{
+
command = "/run/current-system/sw/bin/systemctl restart cachet.service";
+
options = [ "NOPASSWD" ];
+
}
+
];
+
}
+
];
systemd.services.cachet-webhook = lib.mkIf cfg.webhook.enable {
description = "Cachet webhook listener";