commit c883311327f1c842faffc437f344b46a82030b59 · pyrox.dev/nixpkgs

+10
nixos/modules/services/networking/dnscrypt-wrapper.nix
···

       145
       145
        
           };

     

       146
       146
        
           users.groups.dnscrypt-wrapper = { };

     

       147
       147
        
       

     

       148
       148
       +
           security.polkit.extraConfig = ''

     

       149
       149
       +
             // Allow dnscrypt-wrapper user to restart dnscrypt-wrapper.service

     

       150
       150
       +
             polkit.addRule(function(action, subject) {

     

       151
       151
       +
                 if (action.id == "org.freedesktop.systemd1.manage-units" &&

     

       152
       152
       +
                     action.lookup("unit") == "dnscrypt-wrapper.service" &&

     

       153
       153
       +
                     subject.user == "dnscrypt-wrapper") {

     

       154
       154
       +
                     return polkit.Result.YES;

     

       155
       155
       +
                 }

     

       156
       156
       +
               });

     

       157
       157
       +
           '';

     

       148
       158
        
       

     

       149
       159
        
           systemd.services.dnscrypt-wrapper = {

     

       150
       160
        
             description = "dnscrypt-wrapper daemon";