···

       
215
       
 
       
    );

     

       
216
       
 
       


     

       
217
       
 
       
    users = mkIf cfg.daemon.enable {

     

       
218
       
-
       
      extraGroups.nslcd = {

     

       
219
       
 
       
        gid = config.ids.gids.nslcd;

     

       
220
       
 
       
      };

     

       
221
       
 
       


     

       
222
       
-
       
      extraUsers.nslcd = {

     

       
223
       
 
       
        uid = config.ids.uids.nslcd;

     

       
224
       
 
       
        description = "nslcd user.";

     

       
225
       
 
       
        group = "nslcd";

     

···

       
215
       
 
       
    );

     

       
216
       
 
       


     

       
217
       
 
       
    users = mkIf cfg.daemon.enable {

     

       
218
       
+
       
      groups.nslcd = {

     

       
219
       
 
       
        gid = config.ids.gids.nslcd;

     

       
220
       
 
       
      };

     

       
221
       
 
       


     

       
222
       
+
       
      users.nslcd = {

     

       
223
       
 
       
        uid = config.ids.uids.nslcd;

     

       
224
       
 
       
        description = "nslcd user.";

     

       
225
       
 
       
        group = "nslcd";

     

···

       
264
       
 
       
    })

     

       
265
       
 
       


     

       
266
       
 
       
    (mkIf systemWide {

     

       
267
       
-
       
      users.extraUsers.pulse = {

     

       
268
       
 
       
        # For some reason, PulseAudio wants UID == GID.

     

       
269
       
 
       
        uid = assert uid == gid; uid;

     

       
270
       
 
       
        group = "pulse";

     
···

       
274
       
 
       
        createHome = true;

     

       
275
       
 
       
      };

     

       
276
       
 
       


     

       
277
       
-
       
      users.extraGroups.pulse.gid = gid;

     

       
278
       
 
       


     

       
279
       
 
       
      systemd.services.pulseaudio = {

     

       
280
       
 
       
        description = "PulseAudio System-Wide Server";

     

···

       
264
       
 
       
    })

     

       
265
       
 
       


     

       
266
       
 
       
    (mkIf systemWide {

     

       
267
       
+
       
      users.users.pulse = {

     

       
268
       
 
       
        # For some reason, PulseAudio wants UID == GID.

     

       
269
       
 
       
        uid = assert uid == gid; uid;

     

       
270
       
 
       
        group = "pulse";

     
···

       
274
       
 
       
        createHome = true;

     

       
275
       
 
       
      };

     

       
276
       
 
       


     

       
277
       
+
       
      users.groups.pulse.gid = gid;

     

       
278
       
 
       


     

       
279
       
 
       
      systemd.services.pulseaudio = {

     

       
280
       
 
       
        description = "PulseAudio System-Wide Server";

     

···

       
36
       
 
       
        { inherit (cfg) group; }

     

       
37
       
 
       
      ))

     

       
38
       
 
       
    ];

     

       
39
       
-
       
    users.extraGroups."${cfg.group}" = {};

     

       
40
       
 
       
  };

     

       
41
       
 
       
}

     

···

       
36
       
 
       
        { inherit (cfg) group; }

     

       
37
       
 
       
      ))

     

       
38
       
 
       
    ];

     

       
39
       
+
       
    users.groups."${cfg.group}" = {};

     

       
40
       
 
       
  };

     

       
41
       
 
       
}

     

···

       
101
       
 
       
  };

     

       
102
       
 
       


     

       
103
       
 
       
  config = mkIf cfg.enable {

     

       
104
       
-
       
    users.extraGroups = mkIf isMLocate { mlocate = {}; };

     

       
105
       
 
       


     

       
106
       
 
       
    security.wrappers = mkIf isMLocate {

     

       
107
       
 
       
      locate = {

     

···

       
101
       
 
       
  };

     

       
102
       
 
       


     

       
103
       
 
       
  config = mkIf cfg.enable {

     

       
104
       
+
       
    users.groups = mkIf isMLocate { mlocate = {}; };

     

       
105
       
 
       


     

       
106
       
 
       
    security.wrappers = mkIf isMLocate {

     

       
107
       
 
       
      locate = {

     

···

       
3
       
 
       
{

     

       
4
       
 
       
  imports = [ ./graphical.nix ];

     

       
5
       
 
       


     

       
6
       
-
       
  users.extraUsers.demo =

     

       
7
       
 
       
    { isNormalUser = true;

     

       
8
       
 
       
      description = "Demo user account";

     

       
9
       
 
       
      extraGroups = [ "wheel" ];

     

···

       
3
       
 
       
{

     

       
4
       
 
       
  imports = [ ./graphical.nix ];

     

       
5
       
 
       


     

       
6
       
+
       
  users.users.demo =

     

       
7
       
 
       
    { isNormalUser = true;

     

       
8
       
 
       
      description = "Demo user account";

     

       
9
       
 
       
      extraGroups = [ "wheel" ];

     

···

       
14
       
 
       
        description = ''

     

       
15
       
 
       
          Whether to configure system to use Android Debug Bridge (adb).

     

       
16
       
 
       
          To grant access to a user, it must be part of adbusers group:

     

       
17
       
-
       
          <code>users.extraUsers.alice.extraGroups = ["adbusers"];</code>

     

       
18
       
 
       
        '';

     

       
19
       
 
       
        relatedPackages = [ ["androidenv" "platformTools"] ];

     

       
20
       
 
       
      };

     
···

       
25
       
 
       
  config = mkIf config.programs.adb.enable {

     

       
26
       
 
       
    services.udev.packages = [ pkgs.android-udev-rules ];

     

       
27
       
 
       
    environment.systemPackages = [ pkgs.androidenv.platformTools ];

     

       
28
       
-
       
    users.extraGroups.adbusers = {};

     

       
29
       
 
       
  };

     

       
30
       
 
       
}

     

···

       
14
       
 
       
        description = ''

     

       
15
       
 
       
          Whether to configure system to use Android Debug Bridge (adb).

     

       
16
       
 
       
          To grant access to a user, it must be part of adbusers group:

     

       
17
       
+
       
          <code>users.users.alice.extraGroups = ["adbusers"];</code>

     

       
18
       
 
       
        '';

     

       
19
       
 
       
        relatedPackages = [ ["androidenv" "platformTools"] ];

     

       
20
       
 
       
      };

     
···

       
25
       
 
       
  config = mkIf config.programs.adb.enable {

     

       
26
       
 
       
    services.udev.packages = [ pkgs.android-udev-rules ];

     

       
27
       
 
       
    environment.systemPackages = [ pkgs.androidenv.platformTools ];

     

       
28
       
+
       
    users.groups.adbusers = {};

     

       
29
       
 
       
  };

     

       
30
       
 
       
}

     

···

       
15
       
 
       
          Whether to configure system to use gphoto2.

     

       
16
       
 
       
          To grant digital camera access to a user, the user must

     

       
17
       
 
       
          be part of the camera group:

     

       
18
       
-
       
          <code>users.extraUsers.alice.extraGroups = ["camera"];</code>

     

       
19
       
 
       
        '';

     

       
20
       
 
       
      };

     

       
21
       
 
       
    };

     
···

       
25
       
 
       
  config = mkIf config.programs.gphoto2.enable {

     

       
26
       
 
       
    services.udev.packages = [ pkgs.libgphoto2 ];

     

       
27
       
 
       
    environment.systemPackages = [ pkgs.gphoto2 ];

     

       
28
       
-
       
    users.extraGroups.camera = {};

     

       
29
       
 
       
  };

     

       
30
       
 
       
}

     

···

       
15
       
 
       
          Whether to configure system to use gphoto2.

     

       
16
       
 
       
          To grant digital camera access to a user, the user must

     

       
17
       
 
       
          be part of the camera group:

     

       
18
       
+
       
          <code>users.users.alice.extraGroups = ["camera"];</code>

     

       
19
       
 
       
        '';

     

       
20
       
 
       
      };

     

       
21
       
 
       
    };

     
···

       
25
       
 
       
  config = mkIf config.programs.gphoto2.enable {

     

       
26
       
 
       
    services.udev.packages = [ pkgs.libgphoto2 ];

     

       
27
       
 
       
    environment.systemPackages = [ pkgs.gphoto2 ];

     

       
28
       
+
       
    users.groups.camera = {};

     

       
29
       
 
       
  };

     

       
30
       
 
       
}

     

···

       
73
       
 
       
      permissions = "u+rx,g+rx";

     

       
74
       
 
       
    };

     

       
75
       
 
       


     

       
76
       
-
       
    users.extraGroups.sway = {};

     

       
77
       
 
       
    security.pam.services.swaylock = {};

     

       
78
       
 
       


     

       
79
       
 
       
    hardware.opengl.enable = mkDefault true;

     

···

       
73
       
 
       
      permissions = "u+rx,g+rx";

     

       
74
       
 
       
    };

     

       
75
       
 
       


     

       
76
       
+
       
    users.groups.sway = {};

     

       
77
       
 
       
    security.pam.services.swaylock = {};

     

       
78
       
 
       


     

       
79
       
 
       
    hardware.opengl.enable = mkDefault true;

     

···

       
29
       
 
       


     

       
30
       
 
       
  config = mkIf cfg.enable {

     

       
31
       
 
       
    environment.systemPackages = [ wireshark ];

     

       
32
       
-
       
    users.extraGroups.wireshark = {};

     

       
33
       
 
       


     

       
34
       
 
       
    security.wrappers.dumpcap = {

     

       
35
       
 
       
      source = "${wireshark}/bin/dumpcap";

     

···

       
29
       
 
       


     

       
30
       
 
       
  config = mkIf cfg.enable {

     

       
31
       
 
       
    environment.systemPackages = [ wireshark ];

     

       
32
       
+
       
    users.groups.wireshark = {};

     

       
33
       
 
       


     

       
34
       
 
       
    security.wrappers.dumpcap = {

     

       
35
       
 
       
      source = "${wireshark}/bin/dumpcap";

     

···

       
40
       
 
       
      target = "security/pam_mount.conf.xml";

     

       
41
       
 
       
      source =

     

       
42
       
 
       
        let

     

       
43
       
-
       
          extraUserVolumes = filterAttrs (n: u: u.cryptHomeLuks != null) config.users.extraUsers;

     

       
44
       
 
       
          userVolumeEntry = user: "<volume user=\"${user.name}\" path=\"${user.cryptHomeLuks}\" mountpoint=\"${user.home}\" />\n";

     

       
45
       
 
       
        in

     

       
46
       
 
       
         pkgs.writeText "pam_mount.conf.xml" ''

     

···

       
40
       
 
       
      target = "security/pam_mount.conf.xml";

     

       
41
       
 
       
      source =

     

       
42
       
 
       
        let

     

       
43
       
+
       
          extraUserVolumes = filterAttrs (n: u: u.cryptHomeLuks != null) config.users.users;

     

       
44
       
 
       
          userVolumeEntry = user: "<volume user=\"${user.name}\" path=\"${user.cryptHomeLuks}\" mountpoint=\"${user.home}\" />\n";

     

       
45
       
 
       
        in

     

       
46
       
 
       
         pkgs.writeText "pam_mount.conf.xml" ''

     

···

       
94
       
 
       
        rm -rf /var/lib/{polkit-1,PolicyKit}

     

       
95
       
 
       
      '';

     

       
96
       
 
       


     

       
97
       
-
       
    users.extraUsers.polkituser = {

     

       
98
       
 
       
      description = "PolKit daemon";

     

       
99
       
 
       
      uid = config.ids.uids.polkituser;

     

       
100
       
 
       
    };

     

···

       
94
       
 
       
        rm -rf /var/lib/{polkit-1,PolicyKit}

     

       
95
       
 
       
      '';

     

       
96
       
 
       


     

       
97
       
+
       
    users.users.polkituser = {

     

       
98
       
 
       
      description = "PolKit daemon";

     

       
99
       
 
       
      uid = config.ids.uids.polkituser;

     

       
100
       
 
       
    };

     

···

       
34
       
 
       


     

       
35
       
 
       
    services.dbus.packages = [ pkgs.rtkit ];

     

       
36
       
 
       


     

       
37
       
-
       
    users.extraUsers = singleton

     

       
38
       
 
       
      { name = "rtkit";

     

       
39
       
 
       
        uid = config.ids.uids.rtkit;

     

       
40
       
 
       
        description = "RealtimeKit daemon";

     

···

       
34
       
 
       


     

       
35
       
 
       
    services.dbus.packages = [ pkgs.rtkit ];

     

       
36
       
 
       


     

       
37
       
+
       
    users.users = singleton

     

       
38
       
 
       
      { name = "rtkit";

     

       
39
       
 
       
        uid = config.ids.uids.rtkit;

     

       
40
       
 
       
        description = "RealtimeKit daemon";

     

···

       
83
       
 
       
  };

     

       
84
       
 
       


     

       
85
       
 
       
  config = mkIf cfg.enable {

     

       
86
       
-
       
    users.extraGroups.${cfg.group} = { };

     

       
87
       
-
       
    users.extraUsers.${cfg.user} = {

     

       
88
       
 
       
      description = "Oxidized service user";

     

       
89
       
 
       
      group = cfg.group;

     

       
90
       
 
       
      home = cfg.dataDir;

     

···

       
83
       
 
       
  };

     

       
84
       
 
       


     

       
85
       
 
       
  config = mkIf cfg.enable {

     

       
86
       
+
       
    users.groups.${cfg.group} = { };

     

       
87
       
+
       
    users.users.${cfg.user} = {

     

       
88
       
 
       
      description = "Oxidized service user";

     

       
89
       
 
       
      group = cfg.group;

     

       
90
       
 
       
      home = cfg.dataDir;

     

···

       
93
       
 
       
  };

     

       
94
       
 
       


     

       
95
       
 
       
  config = mkIf cfg.enable {

     

       
96
       
-
       
    users.extraUsers.activemq = {

     

       
97
       
 
       
      description = "ActiveMQ server user";

     

       
98
       
 
       
      group = "activemq";

     

       
99
       
 
       
      uid = config.ids.uids.activemq;

     

       
100
       
 
       
    };

     

       
101
       
 
       


     

       
102
       
-
       
    users.extraGroups.activemq.gid = config.ids.gids.activemq;

     

       
103
       
 
       


     

       
104
       
 
       
    systemd.services.activemq_init = {

     

       
105
       
 
       
      wantedBy = [ "activemq.service" ];

     

···

       
93
       
 
       
  };

     

       
94
       
 
       


     

       
95
       
 
       
  config = mkIf cfg.enable {

     

       
96
       
+
       
    users.users.activemq = {

     

       
97
       
 
       
      description = "ActiveMQ server user";

     

       
98
       
 
       
      group = "activemq";

     

       
99
       
 
       
      uid = config.ids.uids.activemq;

     

       
100
       
 
       
    };

     

       
101
       
 
       


     

       
102
       
+
       
    users.groups.activemq.gid = config.ids.gids.activemq;

     

       
103
       
 
       


     

       
104
       
 
       
    systemd.services.activemq_init = {

     

       
105
       
 
       
      wantedBy = [ "activemq.service" ];

     

···

       
83
       
 
       


     

       
84
       
 
       
    environment.systemPackages = [ pkgs.rabbitmq_server ];

     

       
85
       
 
       


     

       
86
       
-
       
    users.extraUsers.rabbitmq = {

     

       
87
       
 
       
      description = "RabbitMQ server user";

     

       
88
       
 
       
      home = "${cfg.dataDir}";

     

       
89
       
 
       
      createHome = true;

     
···

       
91
       
 
       
      uid = config.ids.uids.rabbitmq;

     

       
92
       
 
       
    };

     

       
93
       
 
       


     

       
94
       
-
       
    users.extraGroups.rabbitmq.gid = config.ids.gids.rabbitmq;

     

       
95
       
 
       


     

       
96
       
 
       
    systemd.services.rabbitmq = {

     

       
97
       
 
       
      description = "RabbitMQ Server";

     

···

       
83
       
 
       


     

       
84
       
 
       
    environment.systemPackages = [ pkgs.rabbitmq_server ];

     

       
85
       
 
       


     

       
86
       
+
       
    users.users.rabbitmq = {

     

       
87
       
 
       
      description = "RabbitMQ server user";

     

       
88
       
 
       
      home = "${cfg.dataDir}";

     

       
89
       
 
       
      createHome = true;

     
···

       
91
       
 
       
      uid = config.ids.uids.rabbitmq;

     

       
92
       
 
       
    };

     

       
93
       
 
       


     

       
94
       
+
       
    users.groups.rabbitmq.gid = config.ids.gids.rabbitmq;

     

       
95
       
 
       


     

       
96
       
 
       
    systemd.services.rabbitmq = {

     

       
97
       
 
       
      description = "RabbitMQ Server";

     

···

       
57
       
 
       


     

       
58
       
 
       
  config = mkIf (builtins.length streams != 0) {

     

       
59
       
 
       


     

       
60
       
-
       
    users.extraUsers.liquidsoap = {

     

       
61
       
 
       
      uid = config.ids.uids.liquidsoap;

     

       
62
       
 
       
      group = "liquidsoap";

     

       
63
       
 
       
      extraGroups = [ "audio" ];

     
···

       
66
       
 
       
      createHome = true;

     

       
67
       
 
       
    };

     

       
68
       
 
       


     

       
69
       
-
       
    users.extraGroups.liquidsoap.gid = config.ids.gids.liquidsoap;

     

       
70
       
 
       


     

       
71
       
 
       
    systemd.services = builtins.listToAttrs ( map streamService streams );

     

       
72
       
 
       
  };

     

···

       
57
       
 
       


     

       
58
       
 
       
  config = mkIf (builtins.length streams != 0) {

     

       
59
       
 
       


     

       
60
       
+
       
    users.users.liquidsoap = {

     

       
61
       
 
       
      uid = config.ids.uids.liquidsoap;

     

       
62
       
 
       
      group = "liquidsoap";

     

       
63
       
 
       
      extraGroups = [ "audio" ];

     
···

       
66
       
 
       
      createHome = true;

     

       
67
       
 
       
    };

     

       
68
       
 
       


     

       
69
       
+
       
    users.groups.liquidsoap.gid = config.ids.gids.liquidsoap;

     

       
70
       
 
       


     

       
71
       
 
       
    systemd.services = builtins.listToAttrs ( map streamService streams );

     

       
72
       
 
       
  };

     

···

       
93
       
 
       
      };

     

       
94
       
 
       
    };

     

       
95
       
 
       


     

       
96
       
-
       
    users.extraUsers.mopidy = {

     

       
97
       
 
       
      inherit uid;

     

       
98
       
 
       
      group = "mopidy";

     

       
99
       
 
       
      extraGroups = [ "audio" ];

     
···

       
101
       
 
       
      home = "${cfg.dataDir}";

     

       
102
       
 
       
    };

     

       
103
       
 
       


     

       
104
       
-
       
    users.extraGroups.mopidy.gid = gid;

     

       
105
       
 
       


     

       
106
       
 
       
  };

     

       
107
       
 
       


     

···

       
93
       
 
       
      };

     

       
94
       
 
       
    };

     

       
95
       
 
       


     

       
96
       
+
       
    users.users.mopidy = {

     

       
97
       
 
       
      inherit uid;

     

       
98
       
 
       
      group = "mopidy";

     

       
99
       
 
       
      extraGroups = [ "audio" ];

     
···

       
101
       
 
       
      home = "${cfg.dataDir}";

     

       
102
       
 
       
    };

     

       
103
       
 
       


     

       
104
       
+
       
    users.groups.mopidy.gid = gid;

     

       
105
       
 
       


     

       
106
       
 
       
  };

     

       
107
       
 
       


     

···

       
184
       
 
       
      };

     

       
185
       
 
       
    };

     

       
186
       
 
       


     

       
187
       
-
       
    users.extraUsers = optionalAttrs (cfg.user == name) (singleton {

     

       
188
       
 
       
      inherit uid;

     

       
189
       
 
       
      inherit name;

     

       
190
       
 
       
      group = cfg.group;

     
···

       
193
       
 
       
      home = "${cfg.dataDir}";

     

       
194
       
 
       
    });

     

       
195
       
 
       


     

       
196
       
-
       
    users.extraGroups = optionalAttrs (cfg.group == name) (singleton {

     

       
197
       
 
       
      inherit name;

     

       
198
       
 
       
      gid = gid;

     

       
199
       
 
       
    });

     

···

       
184
       
 
       
      };

     

       
185
       
 
       
    };

     

       
186
       
 
       


     

       
187
       
+
       
    users.users = optionalAttrs (cfg.user == name) (singleton {

     

       
188
       
 
       
      inherit uid;

     

       
189
       
 
       
      inherit name;

     

       
190
       
 
       
      group = cfg.group;

     
···

       
193
       
 
       
      home = "${cfg.dataDir}";

     

       
194
       
 
       
    });

     

       
195
       
 
       


     

       
196
       
+
       
    users.groups = optionalAttrs (cfg.group == name) (singleton {

     

       
197
       
 
       
      inherit name;

     

       
198
       
 
       
      gid = gid;

     

       
199
       
 
       
    });

     

···

       
54
       
 
       
      };

     

       
55
       
 
       
    };

     

       
56
       
 
       


     

       
57
       
-
       
    users.extraUsers.squeezelite= {

     

       
58
       
 
       
      inherit uid;

     

       
59
       
 
       
      group = "nogroup";

     

       
60
       
 
       
      extraGroups = [ "audio" ];

     

···

       
54
       
 
       
      };

     

       
55
       
 
       
    };

     

       
56
       
 
       


     

       
57
       
+
       
    users.users.squeezelite= {

     

       
58
       
 
       
      inherit uid;

     

       
59
       
 
       
      group = "nogroup";

     

       
60
       
 
       
      extraGroups = [ "audio" ];

     

···

       
397
       
 
       


     

       
398
       
 
       
    environment.systemPackages = [ pkgs.bacula ];

     

       
399
       
 
       


     

       
400
       
-
       
    users.extraUsers.bacula = {

     

       
401
       
 
       
      group = "bacula";

     

       
402
       
 
       
      uid = config.ids.uids.bacula;

     

       
403
       
 
       
      home = "${libDir}";

     
···

       
406
       
 
       
      shell = "${pkgs.bash}/bin/bash";

     

       
407
       
 
       
    };

     

       
408
       
 
       


     

       
409
       
-
       
    users.extraGroups.bacula.gid = config.ids.gids.bacula;

     

       
410
       
 
       
  };

     

       
411
       
 
       
}

     

···

       
397
       
 
       


     

       
398
       
 
       
    environment.systemPackages = [ pkgs.bacula ];

     

       
399
       
 
       


     

       
400
       
+
       
    users.users.bacula = {

     

       
401
       
 
       
      group = "bacula";

     

       
402
       
 
       
      uid = config.ids.uids.bacula;

     

       
403
       
 
       
      home = "${libDir}";

     
···

       
406
       
 
       
      shell = "${pkgs.bash}/bin/bash";

     

       
407
       
 
       
    };

     

       
408
       
 
       


     

       
409
       
+
       
    users.groups.bacula.gid = config.ids.gids.bacula;

     

       
410
       
 
       
  };

     

       
411
       
 
       
}

     

···

       
44
       
 
       
      };

     

       
45
       
 
       
    };

     

       
46
       
 
       


     

       
47
       
-
       
    users.extraUsers.duplicati = {

     

       
48
       
 
       
      uid = config.ids.uids.duplicati;

     

       
49
       
 
       
      home = "/var/lib/duplicati";

     

       
50
       
 
       
      createHome = true;

     

       
51
       
 
       
      group = "duplicati";

     

       
52
       
 
       
    };

     

       
53
       
-
       
    users.extraGroups.duplicati.gid = config.ids.gids.duplicati;

     

       
54
       
 
       


     

       
55
       
 
       
  };

     

       
56
       
 
       
}

     

···

       
44
       
 
       
      };

     

       
45
       
 
       
    };

     

       
46
       
 
       


     

       
47
       
+
       
    users.users.duplicati = {

     

       
48
       
 
       
      uid = config.ids.uids.duplicati;

     

       
49
       
 
       
      home = "/var/lib/duplicati";

     

       
50
       
 
       
      createHome = true;

     

       
51
       
 
       
      group = "duplicati";

     

       
52
       
 
       
    };

     

       
53
       
+
       
    users.groups.duplicati.gid = config.ids.gids.duplicati;

     

       
54
       
 
       


     

       
55
       
 
       
  };

     

       
56
       
 
       
}

     

···

       
84
       
 
       
  };

     

       
85
       
 
       


     

       
86
       
 
       
  config = mkIf cfg.enable {

     

       
87
       
-
       
    users.extraUsers = optionalAttrs (cfg.user == defaultUser) (singleton

     

       
88
       
 
       
      { name = defaultUser;

     

       
89
       
 
       
        isSystemUser = true;

     

       
90
       
 
       
        createHome = false;

     

···

       
84
       
 
       
  };

     

       
85
       
 
       


     

       
86
       
 
       
  config = mkIf cfg.enable {

     

       
87
       
+
       
    users.users = optionalAttrs (cfg.user == defaultUser) (singleton

     

       
88
       
 
       
      { name = defaultUser;

     

       
89
       
 
       
        isSystemUser = true;

     

       
90
       
 
       
        createHome = false;

     

···

       
95
       
 
       
      };

     

       
96
       
 
       
    };

     

       
97
       
 
       


     

       
98
       
-
       
    users.extraUsers.restic = {

     

       
99
       
 
       
      group = "restic";

     

       
100
       
 
       
      home = cfg.dataDir;

     

       
101
       
 
       
      createHome = true;

     

       
102
       
 
       
      uid = config.ids.uids.restic;

     

       
103
       
 
       
    };

     

       
104
       
 
       


     

       
105
       
-
       
    users.extraGroups.restic.gid = config.ids.uids.restic;

     

       
106
       
 
       
  };

     

       
107
       
 
       
}

     

···

       
95
       
 
       
      };

     

       
96
       
 
       
    };

     

       
97
       
 
       


     

       
98
       
+
       
    users.users.restic = {

     

       
99
       
 
       
      group = "restic";

     

       
100
       
 
       
      home = cfg.dataDir;

     

       
101
       
 
       
      createHome = true;

     

       
102
       
 
       
      uid = config.ids.uids.restic;

     

       
103
       
 
       
    };

     

       
104
       
 
       


     

       
105
       
+
       
    users.groups.restic.gid = config.ids.uids.restic;

     

       
106
       
 
       
  };

     

       
107
       
 
       
}

     

···

       
1145
       
 
       
      ];

     

       
1146
       
 
       


     

       
1147
       
 
       
      environment.systemPackages = [ cfg.package ];

     

       
1148
       
-
       
      users.extraUsers = singleton {

     

       
1149
       
 
       
        name = "kubernetes";

     

       
1150
       
 
       
        uid = config.ids.uids.kubernetes;

     

       
1151
       
 
       
        description = "Kubernetes user";

     
···

       
1154
       
 
       
        home = cfg.dataDir;

     

       
1155
       
 
       
        createHome = true;

     

       
1156
       
 
       
      };

     

       
1157
       
-
       
      users.extraGroups.kubernetes.gid = config.ids.gids.kubernetes;

     

       
1158
       
 
       


     

       
1159
       
 
       
			# dns addon is enabled by default

     

       
1160
       
 
       
      services.kubernetes.addons.dns.enable = mkDefault true;

     

···

       
1145
       
 
       
      ];

     

       
1146
       
 
       


     

       
1147
       
 
       
      environment.systemPackages = [ cfg.package ];

     

       
1148
       
+
       
      users.users = singleton {

     

       
1149
       
 
       
        name = "kubernetes";

     

       
1150
       
 
       
        uid = config.ids.uids.kubernetes;

     

       
1151
       
 
       
        description = "Kubernetes user";

     
···

       
1154
       
 
       
        home = cfg.dataDir;

     

       
1155
       
 
       
        createHome = true;

     

       
1156
       
 
       
      };

     

       
1157
       
+
       
      users.groups.kubernetes.gid = config.ids.gids.kubernetes;

     

       
1158
       
 
       


     

       
1159
       
 
       
			# dns addon is enabled by default

     

       
1160
       
 
       
      services.kubernetes.addons.dns.enable = mkDefault true;

     

···

       
191
       
 
       
  };

     

       
192
       
 
       


     

       
193
       
 
       
  config = mkIf cfg.enable {

     

       
194
       
-
       
    users.extraGroups = optional (cfg.group == "buildbot") {

     

       
195
       
 
       
      name = "buildbot";

     

       
196
       
 
       
    };

     

       
197
       
 
       


     

       
198
       
-
       
    users.extraUsers = optional (cfg.user == "buildbot") {

     

       
199
       
 
       
      name = "buildbot";

     

       
200
       
 
       
      description = "Buildbot User.";

     

       
201
       
 
       
      isNormalUser = true;

     

···

       
191
       
 
       
  };

     

       
192
       
 
       


     

       
193
       
 
       
  config = mkIf cfg.enable {

     

       
194
       
+
       
    users.groups = optional (cfg.group == "buildbot") {

     

       
195
       
 
       
      name = "buildbot";

     

       
196
       
 
       
    };

     

       
197
       
 
       


     

       
198
       
+
       
    users.users = optional (cfg.user == "buildbot") {

     

       
199
       
 
       
      name = "buildbot";

     

       
200
       
 
       
      description = "Buildbot User.";

     

       
201
       
 
       
      isNormalUser = true;

     

···

       
84
       
 
       
  };

     

       
85
       
 
       


     

       
86
       
 
       
  config = mkIf cfg.enable {

     

       
87
       
-
       
    users.extraGroups = optional (cfg.group == "bbworker") {

     

       
88
       
 
       
      name = "bbworker";

     

       
89
       
 
       
    };

     

       
90
       
 
       


     

       
91
       
-
       
    users.extraUsers = optional (cfg.user == "bbworker") {

     

       
92
       
 
       
      name = "bbworker";

     

       
93
       
 
       
      description = "Buildbot Worker User.";

     

       
94
       
 
       
      isNormalUser = true;

     

···

       
84
       
 
       
  };

     

       
85
       
 
       


     

       
86
       
 
       
  config = mkIf cfg.enable {

     

       
87
       
+
       
    users.groups = optional (cfg.group == "bbworker") {

     

       
88
       
 
       
      name = "bbworker";

     

       
89
       
 
       
    };

     

       
90
       
 
       


     

       
91
       
+
       
    users.users = optional (cfg.user == "bbworker") {

     

       
92
       
 
       
      name = "bbworker";

     

       
93
       
 
       
      description = "Buildbot Worker User.";

     

       
94
       
 
       
      isNormalUser = true;

     

···

       
185
       
 
       
  };

     

       
186
       
 
       


     

       
187
       
 
       
  config = mkIf config.services.buildkite-agent.enable {

     

       
188
       
-
       
    users.extraUsers.buildkite-agent =

     

       
189
       
 
       
      { name = "buildkite-agent";

     

       
190
       
 
       
        home = cfg.dataDir;

     

       
191
       
 
       
        createHome = true;

     

···

       
185
       
 
       
  };

     

       
186
       
 
       


     

       
187
       
 
       
  config = mkIf config.services.buildkite-agent.enable {

     

       
188
       
+
       
    users.users.buildkite-agent =

     

       
189
       
 
       
      { name = "buildkite-agent";

     

       
190
       
 
       
        home = cfg.dataDir;

     

       
191
       
 
       
        createHome = true;

     

···

       
134
       
 
       
    # Make the gitlab-runner command availabe so users can query the runner

     

       
135
       
 
       
    environment.systemPackages = [ cfg.package ];

     

       
136
       
 
       


     

       
137
       
-
       
    users.extraUsers.gitlab-runner = {

     

       
138
       
 
       
      group = "gitlab-runner";

     

       
139
       
 
       
      extraGroups = optional hasDocker "docker";

     

       
140
       
 
       
      uid = config.ids.uids.gitlab-runner;

     
···

       
142
       
 
       
      createHome = true;

     

       
143
       
 
       
    };

     

       
144
       
 
       


     

       
145
       
-
       
    users.extraGroups.gitlab-runner.gid = config.ids.gids.gitlab-runner;

     

       
146
       
 
       
  };

     

       
147
       
 
       
}

     

···

       
134
       
 
       
    # Make the gitlab-runner command availabe so users can query the runner

     

       
135
       
 
       
    environment.systemPackages = [ cfg.package ];

     

       
136
       
 
       


     

       
137
       
+
       
    users.users.gitlab-runner = {

     

       
138
       
 
       
      group = "gitlab-runner";

     

       
139
       
 
       
      extraGroups = optional hasDocker "docker";

     

       
140
       
 
       
      uid = config.ids.uids.gitlab-runner;

     
···

       
142
       
 
       
      createHome = true;

     

       
143
       
 
       
    };

     

       
144
       
 
       


     

       
145
       
+
       
    users.groups.gitlab-runner.gid = config.ids.gids.gitlab-runner;

     

       
146
       
 
       
  };

     

       
147
       
 
       
}

     

···

       
135
       
 
       
  };

     

       
136
       
 
       


     

       
137
       
 
       
  config = mkIf cfg.enable {

     

       
138
       
-
       
    users.extraGroups = optional (cfg.group == "gocd-agent") {

     

       
139
       
 
       
      name = "gocd-agent";

     

       
140
       
 
       
      gid = config.ids.gids.gocd-agent;

     

       
141
       
 
       
    };

     

       
142
       
 
       


     

       
143
       
-
       
    users.extraUsers = optional (cfg.user == "gocd-agent") {

     

       
144
       
 
       
      name = "gocd-agent";

     

       
145
       
 
       
      description = "gocd-agent user";

     

       
146
       
 
       
      createHome = true;

     

···

       
135
       
 
       
  };

     

       
136
       
 
       


     

       
137
       
 
       
  config = mkIf cfg.enable {

     

       
138
       
+
       
    users.groups = optional (cfg.group == "gocd-agent") {

     

       
139
       
 
       
      name = "gocd-agent";

     

       
140
       
 
       
      gid = config.ids.gids.gocd-agent;

     

       
141
       
 
       
    };

     

       
142
       
 
       


     

       
143
       
+
       
    users.users = optional (cfg.user == "gocd-agent") {

     

       
144
       
 
       
      name = "gocd-agent";

     

       
145
       
 
       
      description = "gocd-agent user";

     

       
146
       
 
       
      createHome = true;

     

···

       
113
       
 
       


     

       
114
       
 
       
      extraOptions = mkOption {

     

       
115
       
 
       
        default = [ ];

     

       
116
       
-
       
        example = [ 

     

       
117
       
-
       
          "-X debug" 

     

       
118
       
 
       
          "-Xrunjdwp:transport=dt_socket,server=y,suspend=n,address=5005"

     

       
119
       
 
       
          "-verbose:gc"

     

       
120
       
 
       
          "-Xloggc:go-server-gc.log"

     
···

       
143
       
 
       
  };

     

       
144
       
 
       


     

       
145
       
 
       
  config = mkIf cfg.enable {

     

       
146
       
-
       
    users.extraGroups = optional (cfg.group == "gocd-server") {

     

       
147
       
 
       
      name = "gocd-server";

     

       
148
       
 
       
      gid = config.ids.gids.gocd-server;

     

       
149
       
 
       
    };

     

       
150
       
 
       


     

       
151
       
-
       
    users.extraUsers = optional (cfg.user == "gocd-server") {

     

       
152
       
 
       
      name = "gocd-server";

     

       
153
       
 
       
      description = "gocd-server user";

     

       
154
       
 
       
      createHome = true;

     

···

       
113
       
 
       


     

       
114
       
 
       
      extraOptions = mkOption {

     

       
115
       
 
       
        default = [ ];

     

       
116
       
+
       
        example = [

     

       
117
       
+
       
          "-X debug"

     

       
118
       
 
       
          "-Xrunjdwp:transport=dt_socket,server=y,suspend=n,address=5005"

     

       
119
       
 
       
          "-verbose:gc"

     

       
120
       
 
       
          "-Xloggc:go-server-gc.log"

     
···

       
143
       
 
       
  };

     

       
144
       
 
       


     

       
145
       
 
       
  config = mkIf cfg.enable {

     

       
146
       
+
       
    users.groups = optional (cfg.group == "gocd-server") {

     

       
147
       
 
       
      name = "gocd-server";

     

       
148
       
 
       
      gid = config.ids.gids.gocd-server;

     

       
149
       
 
       
    };

     

       
150
       
 
       


     

       
151
       
+
       
    users.users = optional (cfg.user == "gocd-server") {

     

       
152
       
 
       
      name = "gocd-server";

     

       
153
       
 
       
      description = "gocd-server user";

     

       
154
       
 
       
      createHome = true;

     

···

       
194
       
 
       


     

       
195
       
 
       
  config = mkIf cfg.enable {

     

       
196
       
 
       


     

       
197
       
-
       
    users.extraGroups.hydra = {

     

       
198
       
 
       
      gid = config.ids.gids.hydra;

     

       
199
       
 
       
    };

     

       
200
       
 
       


     

       
201
       
-
       
    users.extraUsers.hydra =

     

       
202
       
 
       
      { description = "Hydra";

     

       
203
       
 
       
        group = "hydra";

     

       
204
       
 
       
        createHome = true;

     
···

       
207
       
 
       
        uid = config.ids.uids.hydra;

     

       
208
       
 
       
      };

     

       
209
       
 
       


     

       
210
       
-
       
    users.extraUsers.hydra-queue-runner =

     

       
211
       
 
       
      { description = "Hydra queue runner";

     

       
212
       
 
       
        group = "hydra";

     

       
213
       
 
       
        useDefaultShell = true;

     
···

       
215
       
 
       
        uid = config.ids.uids.hydra-queue-runner;

     

       
216
       
 
       
      };

     

       
217
       
 
       


     

       
218
       
-
       
    users.extraUsers.hydra-www =

     

       
219
       
 
       
      { description = "Hydra web server";

     

       
220
       
 
       
        group = "hydra";

     

       
221
       
 
       
        useDefaultShell = true;

     

···

       
194
       
 
       


     

       
195
       
 
       
  config = mkIf cfg.enable {

     

       
196
       
 
       


     

       
197
       
+
       
    users.groups.hydra = {

     

       
198
       
 
       
      gid = config.ids.gids.hydra;

     

       
199
       
 
       
    };

     

       
200
       
 
       


     

       
201
       
+
       
    users.users.hydra =

     

       
202
       
 
       
      { description = "Hydra";

     

       
203
       
 
       
        group = "hydra";

     

       
204
       
 
       
        createHome = true;

     
···

       
207
       
 
       
        uid = config.ids.uids.hydra;

     

       
208
       
 
       
      };

     

       
209
       
 
       


     

       
210
       
+
       
    users.users.hydra-queue-runner =

     

       
211
       
 
       
      { description = "Hydra queue runner";

     

       
212
       
 
       
        group = "hydra";

     

       
213
       
 
       
        useDefaultShell = true;

     
···

       
215
       
 
       
        uid = config.ids.uids.hydra-queue-runner;

     

       
216
       
 
       
      };

     

       
217
       
 
       


     

       
218
       
+
       
    users.users.hydra-www =

     

       
219
       
 
       
      { description = "Hydra web server";

     

       
220
       
 
       
        group = "hydra";

     

       
221
       
 
       
        useDefaultShell = true;

     

···

       
150
       
 
       
      pkgs.dejavu_fonts

     

       
151
       
 
       
    ];

     

       
152
       
 
       


     

       
153
       
-
       
    users.extraGroups = optional (cfg.group == "jenkins") {

     

       
154
       
 
       
      name = "jenkins";

     

       
155
       
 
       
      gid = config.ids.gids.jenkins;

     

       
156
       
 
       
    };

     

       
157
       
 
       


     

       
158
       
-
       
    users.extraUsers = optional (cfg.user == "jenkins") {

     

       
159
       
 
       
      name = "jenkins";

     

       
160
       
 
       
      description = "jenkins user";

     

       
161
       
 
       
      createHome = true;

     

···

       
150
       
 
       
      pkgs.dejavu_fonts

     

       
151
       
 
       
    ];

     

       
152
       
 
       


     

       
153
       
+
       
    users.groups = optional (cfg.group == "jenkins") {

     

       
154
       
 
       
      name = "jenkins";

     

       
155
       
 
       
      gid = config.ids.gids.jenkins;

     

       
156
       
 
       
    };

     

       
157
       
 
       


     

       
158
       
+
       
    users.users = optional (cfg.user == "jenkins") {

     

       
159
       
 
       
      name = "jenkins";

     

       
160
       
 
       
      description = "jenkins user";

     

       
161
       
 
       
      createHome = true;

     

···

       
50
       
 
       
  };

     

       
51
       
 
       


     

       
52
       
 
       
  config = mkIf (cfg.enable && !masterCfg.enable) {

     

       
53
       
-
       
    users.extraGroups = optional (cfg.group == "jenkins") {

     

       
54
       
 
       
      name = "jenkins";

     

       
55
       
 
       
      gid = config.ids.gids.jenkins;

     

       
56
       
 
       
    };

     

       
57
       
 
       


     

       
58
       
-
       
    users.extraUsers = optional (cfg.user == "jenkins") {

     

       
59
       
 
       
      name = "jenkins";

     

       
60
       
 
       
      description = "jenkins user";

     

       
61
       
 
       
      createHome = true;

     

···

       
50
       
 
       
  };

     

       
51
       
 
       


     

       
52
       
 
       
  config = mkIf (cfg.enable && !masterCfg.enable) {

     

       
53
       
+
       
    users.groups = optional (cfg.group == "jenkins") {

     

       
54
       
 
       
      name = "jenkins";

     

       
55
       
 
       
      gid = config.ids.gids.jenkins;

     

       
56
       
 
       
    };

     

       
57
       
 
       


     

       
58
       
+
       
    users.users = optional (cfg.user == "jenkins") {

     

       
59
       
 
       
      name = "jenkins";

     

       
60
       
 
       
      description = "jenkins user";

     

       
61
       
 
       
      createHome = true;

     

···

       
52
       
 
       
        message = "Must specify 4Store database name";

     

       
53
       
 
       
      };

     

       
54
       
 
       


     

       
55
       
-
       
    users.extraUsers = singleton

     

       
56
       
 
       
      { name = endpointUser;

     

       
57
       
 
       
        uid = config.ids.uids.fourstorehttp;

     

       
58
       
 
       
        description = "4Store SPARQL endpoint user";

     

···

       
52
       
 
       
        message = "Must specify 4Store database name";

     

       
53
       
 
       
      };

     

       
54
       
 
       


     

       
55
       
+
       
    users.users = singleton

     

       
56
       
 
       
      { name = endpointUser;

     

       
57
       
 
       
        uid = config.ids.uids.fourstorehttp;

     

       
58
       
 
       
        description = "4Store SPARQL endpoint user";

     

···

       
43
       
 
       
        message = "Must specify 4Store database name.";

     

       
44
       
 
       
      };

     

       
45
       
 
       


     

       
46
       
-
       
    users.extraUsers = singleton

     

       
47
       
 
       
      { name = fourStoreUser;

     

       
48
       
 
       
        uid = config.ids.uids.fourstore;

     

       
49
       
 
       
        description = "4Store database user";

     

···

       
43
       
 
       
        message = "Must specify 4Store database name.";

     

       
44
       
 
       
      };

     

       
45
       
 
       


     

       
46
       
+
       
    users.users = singleton

     

       
47
       
 
       
      { name = fourStoreUser;

     

       
48
       
 
       
        uid = config.ids.uids.fourstore;

     

       
49
       
 
       
        description = "4Store database user";

     

···

       
420
       
 
       
      9160

     

       
421
       
 
       
    ];

     

       
422
       
 
       


     

       
423
       
-
       
    users.extraUsers.cassandra =

     

       
424
       
 
       
      if config.ids.uids ? "cassandra"

     

       
425
       
 
       
      then { uid = config.ids.uids.cassandra; } // cassandraUser

     

       
426
       
 
       
      else cassandraUser ;

     

···

       
420
       
 
       
      9160

     

       
421
       
 
       
    ];

     

       
422
       
 
       


     

       
423
       
+
       
    users.users.cassandra =

     

       
424
       
 
       
      if config.ids.uids ? "cassandra"

     

       
425
       
 
       
      then { uid = config.ids.uids.cassandra; } // cassandraUser

     

       
426
       
 
       
      else cassandraUser ;

     

···

       
27
       
 
       


     

       
28
       
 
       
  config = mkIf cfg.enable {

     

       
29
       
 
       


     

       
30
       
-
       
    users.extraUsers.clickhouse = {

     

       
31
       
 
       
      name = "clickhouse";

     

       
32
       
 
       
      uid = config.ids.uids.clickhouse;

     

       
33
       
 
       
      group = "clickhouse";

     

       
34
       
 
       
      description = "ClickHouse server user";

     

       
35
       
 
       
    };

     

       
36
       
 
       


     

       
37
       
-
       
    users.extraGroups.clickhouse.gid = config.ids.gids.clickhouse;

     

       
38
       
 
       


     

       
39
       
 
       
    systemd.services.clickhouse = {

     

       
40
       
 
       
      description = "ClickHouse server";

     

···

       
27
       
 
       


     

       
28
       
 
       
  config = mkIf cfg.enable {

     

       
29
       
 
       


     

       
30
       
+
       
    users.users.clickhouse = {

     

       
31
       
 
       
      name = "clickhouse";

     

       
32
       
 
       
      uid = config.ids.uids.clickhouse;

     

       
33
       
 
       
      group = "clickhouse";

     

       
34
       
 
       
      description = "ClickHouse server user";

     

       
35
       
 
       
    };

     

       
36
       
 
       


     

       
37
       
+
       
    users.groups.clickhouse.gid = config.ids.gids.clickhouse;

     

       
38
       
 
       


     

       
39
       
 
       
    systemd.services.clickhouse = {

     

       
40
       
 
       
      description = "ClickHouse server";

     

···

       
198
       
 
       
      };

     

       
199
       
 
       
    };

     

       
200
       
 
       


     

       
201
       
-
       
    users.extraUsers.couchdb = {

     

       
202
       
 
       
      description = "CouchDB Server user";

     

       
203
       
 
       
      group = "couchdb";

     

       
204
       
 
       
      uid = config.ids.uids.couchdb;

     

       
205
       
 
       
    };

     

       
206
       
 
       


     

       
207
       
-
       
    users.extraGroups.couchdb.gid = config.ids.gids.couchdb;

     

       
208
       
 
       


     

       
209
       
 
       
  };

     

       
210
       
 
       
}

     

···

       
198
       
 
       
      };

     

       
199
       
 
       
    };

     

       
200
       
 
       


     

       
201
       
+
       
    users.users.couchdb = {

     

       
202
       
 
       
      description = "CouchDB Server user";

     

       
203
       
 
       
      group = "couchdb";

     

       
204
       
 
       
      uid = config.ids.uids.couchdb;

     

       
205
       
 
       
    };

     

       
206
       
 
       


     

       
207
       
+
       
    users.groups.couchdb.gid = config.ids.gids.couchdb;

     

       
208
       
 
       


     

       
209
       
 
       
  };

     

       
210
       
 
       
}

     

···

       
154
       
 
       
      # there are some additional settings which should be reviewed

     

       
155
       
 
       
    '';

     

       
156
       
 
       


     

       
157
       
-
       
    users.extraUsers.firebird = {

     

       
158
       
 
       
      description = "Firebird server user";

     

       
159
       
 
       
      group = "firebird";

     

       
160
       
 
       
      uid = config.ids.uids.firebird;

     

       
161
       
 
       
    };

     

       
162
       
 
       


     

       
163
       
-
       
    users.extraGroups.firebird.gid = config.ids.gids.firebird;

     

       
164
       
 
       


     

       
165
       
 
       
  };

     

       
166
       
 
       
}

     

···

       
154
       
 
       
      # there are some additional settings which should be reviewed

     

       
155
       
 
       
    '';

     

       
156
       
 
       


     

       
157
       
+
       
    users.users.firebird = {

     

       
158
       
 
       
      description = "Firebird server user";

     

       
159
       
 
       
      group = "firebird";

     

       
160
       
 
       
      uid = config.ids.uids.firebird;

     

       
161
       
 
       
    };

     

       
162
       
 
       


     

       
163
       
+
       
    users.groups.firebird.gid = config.ids.gids.firebird;

     

       
164
       
 
       


     

       
165
       
 
       
  };

     

       
166
       
 
       
}

     

···

       
325
       
 
       


     

       
326
       
 
       
    environment.systemPackages = [ pkg ];

     

       
327
       
 
       


     

       
328
       
-
       
    users.extraUsers = optionalAttrs (cfg.user == "foundationdb") (singleton

     

       
329
       
 
       
      { name        = "foundationdb";

     

       
330
       
 
       
        description = "FoundationDB User";

     

       
331
       
 
       
        uid         = config.ids.uids.foundationdb;

     

       
332
       
 
       
        group       = cfg.group;

     

       
333
       
 
       
      });

     

       
334
       
 
       


     

       
335
       
-
       
    users.extraGroups = optionalAttrs (cfg.group == "foundationdb") (singleton

     

       
336
       
 
       
      { name = "foundationdb";

     

       
337
       
 
       
        gid  = config.ids.gids.foundationdb;

     

       
338
       
 
       
      });

     

···

       
325
       
 
       


     

       
326
       
 
       
    environment.systemPackages = [ pkg ];

     

       
327
       
 
       


     

       
328
       
+
       
    users.users = optionalAttrs (cfg.user == "foundationdb") (singleton

     

       
329
       
 
       
      { name        = "foundationdb";

     

       
330
       
 
       
        description = "FoundationDB User";

     

       
331
       
 
       
        uid         = config.ids.uids.foundationdb;

     

       
332
       
 
       
        group       = cfg.group;

     

       
333
       
 
       
      });

     

       
334
       
 
       


     

       
335
       
+
       
    users.groups = optionalAttrs (cfg.group == "foundationdb") (singleton

     

       
336
       
 
       
      { name = "foundationdb";

     

       
337
       
 
       
        gid  = config.ids.gids.foundationdb;

     

       
338
       
 
       
      });

     

···

       
122
       
 
       
      };

     

       
123
       
 
       
    };

     

       
124
       
 
       


     

       
125
       
-
       
    users.extraUsers.hbase = {

     

       
126
       
 
       
      description = "HBase Server user";

     

       
127
       
 
       
      group = "hbase";

     

       
128
       
 
       
      uid = config.ids.uids.hbase;

     

       
129
       
 
       
    };

     

       
130
       
 
       


     

       
131
       
-
       
    users.extraGroups.hbase.gid = config.ids.gids.hbase;

     

       
132
       
 
       


     

       
133
       
 
       
  };

     

       
134
       
 
       
}

     

···

       
122
       
 
       
      };

     

       
123
       
 
       
    };

     

       
124
       
 
       


     

       
125
       
+
       
    users.users.hbase = {

     

       
126
       
 
       
      description = "HBase Server user";

     

       
127
       
 
       
      group = "hbase";

     

       
128
       
 
       
      uid = config.ids.uids.hbase;

     

       
129
       
 
       
    };

     

       
130
       
 
       


     

       
131
       
+
       
    users.groups.hbase.gid = config.ids.gids.hbase;

     

       
132
       
 
       


     

       
133
       
 
       
  };

     

       
134
       
 
       
}

     

···

       
182
       
 
       
        '';

     

       
183
       
 
       
    };

     

       
184
       
 
       


     

       
185
       
-
       
    users.extraUsers = optional (cfg.user == "influxdb") {

     

       
186
       
 
       
      name = "influxdb";

     

       
187
       
 
       
      uid = config.ids.uids.influxdb;

     

       
188
       
 
       
      description = "Influxdb daemon user";

     

       
189
       
 
       
    };

     

       
190
       
 
       


     

       
191
       
-
       
    users.extraGroups = optional (cfg.group == "influxdb") {

     

       
192
       
 
       
      name = "influxdb";

     

       
193
       
 
       
      gid = config.ids.gids.influxdb;

     

       
194
       
 
       
    };

     

···

       
182
       
 
       
        '';

     

       
183
       
 
       
    };

     

       
184
       
 
       


     

       
185
       
+
       
    users.users = optional (cfg.user == "influxdb") {

     

       
186
       
 
       
      name = "influxdb";

     

       
187
       
 
       
      uid = config.ids.uids.influxdb;

     

       
188
       
 
       
      description = "Influxdb daemon user";

     

       
189
       
 
       
    };

     

       
190
       
 
       


     

       
191
       
+
       
    users.groups = optional (cfg.group == "influxdb") {

     

       
192
       
 
       
      name = "influxdb";

     

       
193
       
 
       
      gid = config.ids.gids.influxdb;

     

       
194
       
 
       
    };

     

···

       
64
       
 
       


     

       
65
       
 
       
  config = mkIf config.services.memcached.enable {

     

       
66
       
 
       


     

       
67
       
-
       
    users.extraUsers = optional (cfg.user == "memcached") {

     

       
68
       
 
       
      name = "memcached";

     

       
69
       
 
       
      description = "Memcached server user";

     

       
70
       
 
       
    };

     

···

       
64
       
 
       


     

       
65
       
 
       
  config = mkIf config.services.memcached.enable {

     

       
66
       
 
       


     

       
67
       
+
       
    users.users = optional (cfg.user == "memcached") {

     

       
68
       
 
       
      name = "memcached";

     

       
69
       
 
       
      description = "Memcached server user";

     

       
70
       
 
       
    };

     

···

       
93
       
 
       


     

       
94
       
 
       
  config = mkIf config.services.mongodb.enable {

     

       
95
       
 
       


     

       
96
       
-
       
    users.extraUsers.mongodb = mkIf (cfg.user == "mongodb")

     

       
97
       
 
       
      { name = "mongodb";

     

       
98
       
 
       
        uid = config.ids.uids.mongodb;

     

       
99
       
 
       
        description = "MongoDB server user";

     

···

       
93
       
 
       


     

       
94
       
 
       
  config = mkIf config.services.mongodb.enable {

     

       
95
       
 
       


     

       
96
       
+
       
    users.users.mongodb = mkIf (cfg.user == "mongodb")

     

       
97
       
 
       
      { name = "mongodb";

     

       
98
       
 
       
        uid = config.ids.uids.mongodb;

     

       
99
       
 
       
        description = "MongoDB server user";

     

···

       
221
       
 
       
      mkDefault (if versionAtLeast config.system.nixos.stateVersion "17.09" then "/var/lib/mysql"

     

       
222
       
 
       
                 else "/var/mysql");

     

       
223
       
 
       


     

       
224
       
-
       
    users.extraUsers.mysql = {

     

       
225
       
 
       
      description = "MySQL server user";

     

       
226
       
 
       
      group = "mysql";

     

       
227
       
 
       
      uid = config.ids.uids.mysql;

     

       
228
       
 
       
    };

     

       
229
       
 
       


     

       
230
       
-
       
    users.extraGroups.mysql.gid = config.ids.gids.mysql;

     

       
231
       
 
       


     

       
232
       
 
       
    environment.systemPackages = [mysql];

     

       
233
       
 
       


     

···

       
221
       
 
       
      mkDefault (if versionAtLeast config.system.nixos.stateVersion "17.09" then "/var/lib/mysql"

     

       
222
       
 
       
                 else "/var/mysql");

     

       
223
       
 
       


     

       
224
       
+
       
    users.users.mysql = {

     

       
225
       
 
       
      description = "MySQL server user";

     

       
226
       
 
       
      group = "mysql";

     

       
227
       
 
       
      uid = config.ids.uids.mysql;

     

       
228
       
 
       
    };

     

       
229
       
 
       


     

       
230
       
+
       
    users.groups.mysql.gid = config.ids.gids.mysql;

     

       
231
       
 
       


     

       
232
       
 
       
    environment.systemPackages = [mysql];

     

       
233
       
 
       


     

···

       
139
       
 
       


     

       
140
       
 
       
    environment.systemPackages = [ cfg.package ];

     

       
141
       
 
       


     

       
142
       
-
       
    users.extraUsers = singleton {

     

       
143
       
 
       
      name = "neo4j";

     

       
144
       
 
       
      uid = config.ids.uids.neo4j;

     

       
145
       
 
       
      description = "Neo4j daemon user";

     

···

       
139
       
 
       


     

       
140
       
 
       
    environment.systemPackages = [ cfg.package ];

     

       
141
       
 
       


     

       
142
       
+
       
    users.users = singleton {

     

       
143
       
 
       
      name = "neo4j";

     

       
144
       
 
       
      uid = config.ids.uids.neo4j;

     

       
145
       
 
       
      description = "Neo4j daemon user";

     

···

       
145
       
 
       
          "${configOpts}";

     

       
146
       
 
       
    };

     

       
147
       
 
       


     

       
148
       
-
       
    users.extraUsers.openldap =

     

       
149
       
 
       
      { name = cfg.user;

     

       
150
       
 
       
        group = cfg.group;

     

       
151
       
 
       
        uid = config.ids.uids.openldap;

     

       
152
       
 
       
      };

     

       
153
       
 
       


     

       
154
       
-
       
    users.extraGroups.openldap =

     

       
155
       
 
       
      { name = cfg.group;

     

       
156
       
 
       
        gid = config.ids.gids.openldap;

     

       
157
       
 
       
      };

     

···

       
145
       
 
       
          "${configOpts}";

     

       
146
       
 
       
    };

     

       
147
       
 
       


     

       
148
       
+
       
    users.users.openldap =

     

       
149
       
 
       
      { name = cfg.user;

     

       
150
       
 
       
        group = cfg.group;

     

       
151
       
 
       
        uid = config.ids.uids.openldap;

     

       
152
       
 
       
      };

     

       
153
       
 
       


     

       
154
       
+
       
    users.groups.openldap =

     

       
155
       
 
       
      { name = cfg.group;

     

       
156
       
 
       
        gid = config.ids.gids.openldap;

     

       
157
       
 
       
      };

     

···

       
97
       
 
       
      };

     

       
98
       
 
       
    };

     

       
99
       
 
       


     

       
100
       
-
       
    users.extraUsers.opentsdb = {

     

       
101
       
 
       
      description = "OpenTSDB Server user";

     

       
102
       
 
       
      group = "opentsdb";

     

       
103
       
 
       
      uid = config.ids.uids.opentsdb;

     

       
104
       
 
       
    };

     

       
105
       
 
       


     

       
106
       
-
       
    users.extraGroups.opentsdb.gid = config.ids.gids.opentsdb;

     

       
107
       
 
       


     

       
108
       
 
       
  };

     

       
109
       
 
       
}

     

···

       
97
       
 
       
      };

     

       
98
       
 
       
    };

     

       
99
       
 
       


     

       
100
       
+
       
    users.users.opentsdb = {

     

       
101
       
 
       
      description = "OpenTSDB Server user";

     

       
102
       
 
       
      group = "opentsdb";

     

       
103
       
 
       
      uid = config.ids.uids.opentsdb;

     

       
104
       
 
       
    };

     

       
105
       
 
       


     

       
106
       
+
       
    users.groups.opentsdb.gid = config.ids.gids.opentsdb;

     

       
107
       
 
       


     

       
108
       
 
       
  };

     

       
109
       
 
       
}

     

···

       
183
       
 
       
        host  all all ::1/128      md5

     

       
184
       
 
       
      '';

     

       
185
       
 
       


     

       
186
       
-
       
    users.extraUsers.postgres =

     

       
187
       
 
       
      { name = "postgres";

     

       
188
       
 
       
        uid = config.ids.uids.postgres;

     

       
189
       
 
       
        group = "postgres";

     

       
190
       
 
       
        description = "PostgreSQL server user";

     

       
191
       
 
       
      };

     

       
192
       
 
       


     

       
193
       
-
       
    users.extraGroups.postgres.gid = config.ids.gids.postgres;

     

       
194
       
 
       


     

       
195
       
 
       
    environment.systemPackages = [ postgresql ];

     

       
196
       
 
       


     

···

       
183
       
 
       
        host  all all ::1/128      md5

     

       
184
       
 
       
      '';

     

       
185
       
 
       


     

       
186
       
+
       
    users.users.postgres =

     

       
187
       
 
       
      { name = "postgres";

     

       
188
       
 
       
        uid = config.ids.uids.postgres;

     

       
189
       
 
       
        group = "postgres";

     

       
190
       
 
       
        description = "PostgreSQL server user";

     

       
191
       
 
       
      };

     

       
192
       
 
       


     

       
193
       
+
       
    users.groups.postgres.gid = config.ids.gids.postgres;

     

       
194
       
 
       


     

       
195
       
 
       
    environment.systemPackages = [ postgresql ];

     

       
196
       
 
       


     

···

       
217
       
 
       
      allowedTCPPorts = [ cfg.port ];

     

       
218
       
 
       
    };

     

       
219
       
 
       


     

       
220
       
-
       
    users.extraUsers.redis =

     

       
221
       
 
       
      { name = cfg.user;

     

       
222
       
 
       
        description = "Redis database user";

     

       
223
       
 
       
      };

     

···

       
217
       
 
       
      allowedTCPPorts = [ cfg.port ];

     

       
218
       
 
       
    };

     

       
219
       
 
       


     

       
220
       
+
       
    users.users.redis =

     

       
221
       
 
       
      { name = cfg.user;

     

       
222
       
 
       
        description = "Redis database user";

     

       
223
       
 
       
      };

     

···

       
96
       
 
       
      '';

     

       
97
       
 
       
    };

     

       
98
       
 
       


     

       
99
       
-
       
    users.extraUsers.rethinkdb = mkIf (cfg.user == "rethinkdb")

     

       
100
       
 
       
      { name = "rethinkdb";

     

       
101
       
 
       
        description = "RethinkDB server user";

     

       
102
       
 
       
      };

     

       
103
       
 
       


     

       
104
       
-
       
    users.extraGroups = optionalAttrs (cfg.group == "rethinkdb") (singleton

     

       
105
       
 
       
      { name = "rethinkdb";

     

       
106
       
 
       
      });

     

       
107
       
 
       


     

···

       
96
       
 
       
      '';

     

       
97
       
 
       
    };

     

       
98
       
 
       


     

       
99
       
+
       
    users.users.rethinkdb = mkIf (cfg.user == "rethinkdb")

     

       
100
       
 
       
      { name = "rethinkdb";

     

       
101
       
 
       
        description = "RethinkDB server user";

     

       
102
       
 
       
      };

     

       
103
       
 
       


     

       
104
       
+
       
    users.groups = optionalAttrs (cfg.group == "rethinkdb") (singleton

     

       
105
       
 
       
      { name = "rethinkdb";

     

       
106
       
 
       
      });

     

       
107
       
 
       


     

···

       
145
       
 
       
      ${cfg.extraAdvancedConfig}

     

       
146
       
 
       
    '';

     

       
147
       
 
       


     

       
148
       
-
       
    users.extraUsers.riak-cs = {

     

       
149
       
 
       
      name = "riak-cs";

     

       
150
       
 
       
      uid = config.ids.uids.riak-cs;

     

       
151
       
 
       
      group = "riak";

     

···

       
145
       
 
       
      ${cfg.extraAdvancedConfig}

     

       
146
       
 
       
    '';

     

       
147
       
 
       


     

       
148
       
+
       
    users.users.riak-cs = {

     

       
149
       
 
       
      name = "riak-cs";

     

       
150
       
 
       
      uid = config.ids.uids.riak-cs;

     

       
151
       
 
       
      group = "riak";

     

···

       
102
       
 
       
      ${cfg.extraAdvancedConfig}

     

       
103
       
 
       
    '';

     

       
104
       
 
       


     

       
105
       
-
       
    users.extraUsers.riak = {

     

       
106
       
 
       
      name = "riak";

     

       
107
       
 
       
      uid = config.ids.uids.riak;

     

       
108
       
 
       
      group = "riak";

     

       
109
       
 
       
      description = "Riak server user";

     

       
110
       
 
       
    };

     

       
111
       
 
       


     

       
112
       
-
       
    users.extraGroups.riak.gid = config.ids.gids.riak;

     

       
113
       
 
       


     

       
114
       
 
       
    systemd.services.riak = {

     

       
115
       
 
       
      description = "Riak Server";

     

···

       
102
       
 
       
      ${cfg.extraAdvancedConfig}

     

       
103
       
 
       
    '';

     

       
104
       
 
       


     

       
105
       
+
       
    users.users.riak = {

     

       
106
       
 
       
      name = "riak";

     

       
107
       
 
       
      uid = config.ids.uids.riak;

     

       
108
       
 
       
      group = "riak";

     

       
109
       
 
       
      description = "Riak server user";

     

       
110
       
 
       
    };

     

       
111
       
 
       


     

       
112
       
+
       
    users.groups.riak.gid = config.ids.gids.riak;

     

       
113
       
 
       


     

       
114
       
 
       
    systemd.services.riak = {

     

       
115
       
 
       
      description = "Riak Server";

     

···

       
143
       
 
       
      ${cfg.extraConfig}

     

       
144
       
 
       
    '';

     

       
145
       
 
       


     

       
146
       
-
       
    users.extraUsers.stanchion = {

     

       
147
       
 
       
      name = "stanchion";

     

       
148
       
 
       
      uid = config.ids.uids.stanchion;

     

       
149
       
 
       
      group = "stanchion";

     

       
150
       
 
       
      description = "Stanchion server user";

     

       
151
       
 
       
    };

     

       
152
       
 
       


     

       
153
       
-
       
    users.extraGroups.stanchion.gid = config.ids.gids.stanchion;

     

       
154
       
 
       


     

       
155
       
 
       
    systemd.services.stanchion = {

     

       
156
       
 
       
      description = "Stanchion Server";

     

···

       
143
       
 
       
      ${cfg.extraConfig}

     

       
144
       
 
       
    '';

     

       
145
       
 
       


     

       
146
       
+
       
    users.users.stanchion = {

     

       
147
       
 
       
      name = "stanchion";

     

       
148
       
 
       
      uid = config.ids.uids.stanchion;

     

       
149
       
 
       
      group = "stanchion";

     

       
150
       
 
       
      description = "Stanchion server user";

     

       
151
       
 
       
    };

     

       
152
       
 
       


     

       
153
       
+
       
    users.groups.stanchion.gid = config.ids.gids.stanchion;

     

       
154
       
 
       


     

       
155
       
 
       
    systemd.services.stanchion = {

     

       
156
       
 
       
      description = "Stanchion Server";

     

···

       
54
       
 
       


     

       
55
       
 
       
  config = mkIf cfg.enable {

     

       
56
       
 
       


     

       
57
       
-
       
    users.extraUsers = singleton

     

       
58
       
 
       
      { name = virtuosoUser;

     

       
59
       
 
       
        uid = config.ids.uids.virtuoso;

     

       
60
       
 
       
        description = "virtuoso user";

     

···

       
54
       
 
       


     

       
55
       
 
       
  config = mkIf cfg.enable {

     

       
56
       
 
       


     

       
57
       
+
       
    users.users = singleton

     

       
58
       
 
       
      { name = virtuosoUser;

     

       
59
       
 
       
        uid = config.ids.uids.virtuoso;

     

       
60
       
 
       
        description = "virtuoso user";

     

···

       
111
       
 
       
  };

     

       
112
       
 
       


     

       
113
       
 
       
  config = mkIf (cfg.enable) {

     

       
114
       
-
       
    users.extraUsers = optional (cfg.user == "infinoted")

     

       
115
       
 
       
      { name = "infinoted";

     

       
116
       
 
       
        description = "Infinoted user";

     

       
117
       
 
       
        group = cfg.group;

     

       
118
       
 
       
      };

     

       
119
       
-
       
    users.extraGroups = optional (cfg.group == "infinoted")

     

       
120
       
 
       
      { name = "infinoted";

     

       
121
       
 
       
      };

     

       
122
       
 
       
  

     

···

       
111
       
 
       
  };

     

       
112
       
 
       


     

       
113
       
 
       
  config = mkIf (cfg.enable) {

     

       
114
       
+
       
    users.users = optional (cfg.user == "infinoted")

     

       
115
       
 
       
      { name = "infinoted";

     

       
116
       
 
       
        description = "Infinoted user";

     

       
117
       
 
       
        group = cfg.group;

     

       
118
       
 
       
      };

     

       
119
       
+
       
    users.groups = optional (cfg.group == "infinoted")

     

       
120
       
 
       
      { name = "infinoted";

     

       
121
       
 
       
      };

     

       
122
       
 
       
  

     

···

       
45
       
 
       
  };

     

       
46
       
 
       


     

       
47
       
 
       
  config = mkIf cfg.enable {

     

       
48
       
-
       
    users.extraUsers.minecraft = {

     

       
49
       
 
       
      description     = "Minecraft Server Service user";

     

       
50
       
 
       
      home            = cfg.dataDir;

     

       
51
       
 
       
      createHome      = true;

     

···

       
45
       
 
       
  };

     

       
46
       
 
       


     

       
47
       
 
       
  config = mkIf cfg.enable {

     

       
48
       
+
       
    users.users.minecraft = {

     

       
49
       
 
       
      description     = "Minecraft Server Service user";

     

       
50
       
 
       
      home            = cfg.dataDir;

     

       
51
       
 
       
      createHome      = true;

     

···

       
79
       
 
       
  };

     

       
80
       
 
       


     

       
81
       
 
       
  config = mkIf cfg.enable {

     

       
82
       
-
       
    users.extraUsers.minetest = {

     

       
83
       
 
       
      description     = "Minetest Server Service user";

     

       
84
       
 
       
      home            = "/var/lib/minetest";

     

       
85
       
 
       
      createHome      = true;

     

···

       
79
       
 
       
  };

     

       
80
       
 
       


     

       
81
       
 
       
  config = mkIf cfg.enable {

     

       
82
       
+
       
    users.users.minetest = {

     

       
83
       
 
       
      description     = "Minetest Server Service user";

     

       
84
       
 
       
      home            = "/var/lib/minetest";

     

       
85
       
 
       
      createHome      = true;

     

···

       
105
       
 
       
  };

     

       
106
       
 
       


     

       
107
       
 
       
  config = mkIf cfg.enable {

     

       
108
       
-
       
    users.extraUsers.terraria = {

     

       
109
       
 
       
      description = "Terraria server service user";

     

       
110
       
 
       
      home        = "/var/lib/terraria";

     

       
111
       
 
       
      createHome  = true;

     

       
112
       
 
       
      uid         = config.ids.uids.terraria;

     

       
113
       
 
       
    };

     

       
114
       
 
       


     

       
115
       
-
       
    users.extraGroups.terraria = {

     

       
116
       
 
       
      gid = config.ids.gids.terraria;

     

       
117
       
 
       
      members = [ "terraria" ];

     

       
118
       
 
       
    };

     

···

       
105
       
 
       
  };

     

       
106
       
 
       


     

       
107
       
 
       
  config = mkIf cfg.enable {

     

       
108
       
+
       
    users.users.terraria = {

     

       
109
       
 
       
      description = "Terraria server service user";

     

       
110
       
 
       
      home        = "/var/lib/terraria";

     

       
111
       
 
       
      createHome  = true;

     

       
112
       
 
       
      uid         = config.ids.uids.terraria;

     

       
113
       
 
       
    };

     

       
114
       
 
       


     

       
115
       
+
       
    users.groups.terraria = {

     

       
116
       
 
       
      gid = config.ids.gids.terraria;

     

       
117
       
 
       
      members = [ "terraria" ];

     

       
118
       
 
       
    };

     

···

       
124
       
 
       
      environment.sessionVariables = env;

     

       
125
       
 
       
      services.udev.packages = backends;

     

       
126
       
 
       


     

       
127
       
-
       
      users.extraGroups."scanner".gid = config.ids.gids.scanner;

     

       
128
       
 
       
    })

     

       
129
       
 
       


     

       
130
       
 
       
    (mkIf config.services.saned.enable {

     
···

       
152
       
 
       
        };

     

       
153
       
 
       
      };

     

       
154
       
 
       


     

       
155
       
-
       
      users.extraUsers."scanner" = {

     

       
156
       
 
       
        uid = config.ids.uids.scanner;

     

       
157
       
 
       
        group = "scanner";

     

       
158
       
 
       
      };