prowlarr: fix perms
All checks were successful
Build and Deploy / deploy (push) Successful in 2m23s
All checks were successful
Build and Deploy / deploy (push) Successful in 2m23s
This commit is contained in:
@@ -32,6 +32,17 @@
|
|||||||
};
|
};
|
||||||
users.groups.prowlarr = { };
|
users.groups.prowlarr = { };
|
||||||
|
|
||||||
|
# The upstream prowlarr module hardcodes root:root in tmpfiles for custom dataDirs
|
||||||
|
# (systemd.tmpfiles.settings."10-prowlarr"), which gets applied by
|
||||||
|
# systemd-tmpfiles-setup.service on every boot/deploy, resetting the directory
|
||||||
|
# ownership and making Prowlarr unable to access its SQLite databases.
|
||||||
|
# Override to use the correct user as we disable DynamicUser
|
||||||
|
systemd.tmpfiles.settings."10-prowlarr".${service_configs.prowlarr.dataDir}.d = lib.mkForce {
|
||||||
|
user = "prowlarr";
|
||||||
|
group = "prowlarr";
|
||||||
|
mode = "0700";
|
||||||
|
};
|
||||||
|
|
||||||
systemd.services.prowlarr.serviceConfig = {
|
systemd.services.prowlarr.serviceConfig = {
|
||||||
DynamicUser = lib.mkForce false;
|
DynamicUser = lib.mkForce false;
|
||||||
User = "prowlarr";
|
User = "prowlarr";
|
||||||
|
|||||||
Reference in New Issue
Block a user