pyrox.dev
dnscrypt-proxy service: use dynamic uid/gid
The daemon doesn't have any portable data, reserving a
UID/GID for it is redundant.
This frees up UID/GID 151.
-2
nixos/modules/misc/ids.nix
-2
nixos/modules/misc/ids.nix
···
176
176
seeks = 148;
177
177
prosody = 149;
178
178
i2pd = 150;
179
-
dnscrypt-proxy = 151;
180
179
systemd-network = 152;
181
180
systemd-resolve = 153;
182
181
systemd-timesync = 154;
···
414
413
seeks = 148;
415
414
prosody = 149;
416
415
i2pd = 150;
417
-
dnscrypt-proxy = 151;
418
416
systemd-network = 152;
419
417
systemd-resolve = 153;
420
418
systemd-timesync = 154;
+4
-3
nixos/modules/services/networking/dnscrypt-proxy.nix
+4
-3
nixos/modules/services/networking/dnscrypt-proxy.nix
···
173
173
}
174
174
''));
175
175
176
-
users.extraUsers.dnscrypt-proxy = {
177
-
uid = config.ids.uids.dnscrypt-proxy;
176
+
users.users.dnscrypt-proxy = {
178
177
description = "dnscrypt-proxy daemon user";
178
+
isSystemUser = true;
179
+
group = "dnscrypt-proxy";
179
180
};
180
-
users.extraGroups.dnscrypt-proxy.gid = config.ids.gids.dnscrypt-proxy;
181
+
users.groups.dnscrypt-proxy = {};
181
182
182
183
systemd.sockets.dnscrypt-proxy = {
183
184
description = "dnscrypt-proxy listening socket";