···

       
212
       
 
       
      sddm = 175;

     

       
213
       
 
       
      tss = 176;

     

       
214
       
 
       
      #memcached = 177; removed 2018-01-03

     

       
215
       
-
       
      ntp = 179;

     

       
216
       
 
       
      zabbix = 180;

     

       
217
       
 
       
      #redis = 181; removed 2018-01-03

     

       
218
       
 
       
      #unifi = 183; dynamically allocated as of 2021-09-17

     

···

       
212
       
 
       
      sddm = 175;

     

       
213
       
 
       
      tss = 176;

     

       
214
       
 
       
      #memcached = 177; removed 2018-01-03

     

       
215
       
+
       
      #ntp = 179; # dynamically allocated as of 2021-09-17

     

       
216
       
 
       
      zabbix = 180;

     

       
217
       
 
       
      #redis = 181; removed 2018-01-03

     

       
218
       
 
       
      #unifi = 183; dynamically allocated as of 2021-09-17

     

···

       
10
       
 
       


     

       
11
       
 
       
  stateDir = "/var/lib/ntp";

     

       
12
       
 
       


     

       
13
       
-
       
  ntpUser = "ntp";

     

       
14
       
-
       


     

       
15
       
 
       
  configFile = pkgs.writeText "ntp.conf" ''

     

       
16
       
 
       
    driftfile ${stateDir}/ntp.drift

     

       
17
       
 
       


     
···

       
27
       
 
       
    ${cfg.extraConfig}

     

       
28
       
 
       
  '';

     

       
29
       
 
       


     

       
30
       
-
       
  ntpFlags = "-c ${configFile} -u ${ntpUser}:nogroup ${toString cfg.extraFlags}";

     

       
31
       
 
       


     

       
32
       
 
       
in

     

       
33
       
 
       


     
···

       
119
       
 
       


     

       
120
       
 
       
    systemd.services.systemd-timedated.environment = { SYSTEMD_TIMEDATED_NTP_SERVICES = "ntpd.service"; };

     

       
121
       
 
       


     

       
122
       
-
       
    users.users.${ntpUser} =

     

       
123
       
-
       
      { uid = config.ids.uids.ntp;

     

       
0
       
 
       

     

       
124
       
 
       
        description = "NTP daemon user";

     

       
125
       
 
       
        home = stateDir;

     

       
126
       
 
       
      };

     

       
0
       
 
       

     

       
127
       
 
       


     

       
128
       
 
       
    systemd.services.ntpd =

     

       
129
       
 
       
      { description = "NTP Daemon";

     
···

       
135
       
 
       
        preStart =

     

       
136
       
 
       
          ''

     

       
137
       
 
       
            mkdir -m 0755 -p ${stateDir}

     

       
138
       
-
       
            chown ${ntpUser} ${stateDir}

     

       
139
       
 
       
          '';

     

       
140
       
 
       


     

       
141
       
 
       
        serviceConfig = {

     

···

       
10
       
 
       


     

       
11
       
 
       
  stateDir = "/var/lib/ntp";

     

       
12
       
 
       


     

       
0
       
 
       

     

       
0
       
 
       

     

       
13
       
 
       
  configFile = pkgs.writeText "ntp.conf" ''

     

       
14
       
 
       
    driftfile ${stateDir}/ntp.drift

     

       
15
       
 
       


     
···

       
25
       
 
       
    ${cfg.extraConfig}

     

       
26
       
 
       
  '';

     

       
27
       
 
       


     

       
28
       
+
       
  ntpFlags = "-c ${configFile} -u ntp:ntp ${toString cfg.extraFlags}";

     

       
29
       
 
       


     

       
30
       
 
       
in

     

       
31
       
 
       


     
···

       
117
       
 
       


     

       
118
       
 
       
    systemd.services.systemd-timedated.environment = { SYSTEMD_TIMEDATED_NTP_SERVICES = "ntpd.service"; };

     

       
119
       
 
       


     

       
120
       
+
       
    users.users.ntp =

     

       
121
       
+
       
      { isSystemUser = true;

     

       
122
       
+
       
        group = "ntp";

     

       
123
       
 
       
        description = "NTP daemon user";

     

       
124
       
 
       
        home = stateDir;

     

       
125
       
 
       
      };

     

       
126
       
+
       
    users.groups.ntp = {};

     

       
127
       
 
       


     

       
128
       
 
       
    systemd.services.ntpd =

     

       
129
       
 
       
      { description = "NTP Daemon";

     
···

       
135
       
 
       
        preStart =

     

       
136
       
 
       
          ''

     

       
137
       
 
       
            mkdir -m 0755 -p ${stateDir}

     

       
138
       
+
       
            chown ntp ${stateDir}

     

       
139
       
 
       
          '';

     

       
140
       
 
       


     

       
141
       
 
       
        serviceConfig = {

     

···

       
61
       
 
       
    environment.etc."ntpd.conf".text = configFile;

     

       
62
       
 
       


     

       
63
       
 
       
    users.users.ntp = {

     

       
64
       
-
       
      uid = config.ids.uids.ntp;

     

       
0
       
 
       

     

       
65
       
 
       
      description = "OpenNTP daemon user";

     

       
66
       
 
       
      home = "/var/empty";

     

       
67
       
 
       
    };

     

       
0
       
 
       

     

       
68
       
 
       


     

       
69
       
 
       
    systemd.services.openntpd = {

     

       
70
       
 
       
      description = "OpenNTP Server";

     

···

       
61
       
 
       
    environment.etc."ntpd.conf".text = configFile;

     

       
62
       
 
       


     

       
63
       
 
       
    users.users.ntp = {

     

       
64
       
+
       
      isSystemUser = true;

     

       
65
       
+
       
      group = "ntp";

     

       
66
       
 
       
      description = "OpenNTP daemon user";

     

       
67
       
 
       
      home = "/var/empty";

     

       
68
       
 
       
    };

     

       
69
       
+
       
    users.groups.ntp = {};

     

       
70
       
 
       


     

       
71
       
 
       
    systemd.services.openntpd = {

     

       
72
       
 
       
      description = "OpenNTP Server";