nordic-dev.net/nixpkgs
nordic-dev.net/nixpkgs
2
0
Fork 0
mirror of https://github.com/NixOS/nixpkgs.git synced 2025-02-23 20:44:12 +00:00
Code Issues Packages Projects Releases Wiki Activity

nixos/telegraf: don't run as nogroup

Browse Source
This commit is contained in:
Jörg Thalheim 2021-04-15 20:34:10 +02:00
parent 0839cf1d45
commit cc56dc078d
1 changed files with 4 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
nixos/modules/services/monitoring/telegraf.nix
View File

@ -73,6 +73,7 @@ in {
ExecReload="${pkgs.coreutils}/bin/kill -HUP $MAINPID"; ExecReload="${pkgs.coreutils}/bin/kill -HUP $MAINPID";
RuntimeDirectory = "telegraf"; RuntimeDirectory = "telegraf";
User = "telegraf"; User = "telegraf";
Group = "telegraf";
Restart = "on-failure"; Restart = "on-failure";
# for ping probes # for ping probes
AmbientCapabilities = [ "CAP_NET_RAW" ]; AmbientCapabilities = [ "CAP_NET_RAW" ];
@ -81,7 +82,10 @@ in {
users.users.telegraf = { users.users.telegraf = {
uid = config.ids.uids.telegraf; uid = config.ids.uids.telegraf;
group = "telegraf";
description = "telegraf daemon user"; description = "telegraf daemon user";
}; };
users.groups.telegraf = {};
}; };
} }