Commit 513678ee authored by Bruno BELANYI's avatar Bruno BELANYI
Browse files

nixos/services.nginx.sso: use 'DynamicUser' 

Now that we use `LoadCredential` to read secrets, we can go back to
using `DynamicUser` for the service.
parent abb3c9ae

nixos/modules/services/security/nginx-sso.nix

+1 −9
Original line number Diff line number Diff line
@@ -75,16 +75,8 @@ in 
        '';

        LoadCredential = secretsReplacement.credentials;

        Restart = "always";

        User = "nginx-sso";

        Group = "nginx-sso";

        DynamicUser = true;

      };

    };



    users.users.nginx-sso = {

      isSystemUser = true;

      group = "nginx-sso";

    };



    users.groups.nginx-sso = { };

  };

}