alioth/nixpkgs
3
0
Fork 0
forked from mirrors/nixpkgs
Code Releases Activity
nixpkgs/nixos/modules/misc/ids.nix

663 lines
16 KiB
Nix
Raw Normal View History

* Move the uid/gid mappings into a module. This allows other modules to use it through config.ids.{uids,gids} rather than `import relative-path/ids.nix'. svn path=/nixos/branches/modular-nixos/; revision=15796
2009-05-29 15:25:56 +01:00
# This module defines the global list of uids and gids. We keep a
Fix typos, especially those that end up in the NixOS manual
2013-08-10 22:07:13 +01:00
# central list to prevent id collisions.
* Move the uid/gid mappings into a module. This allows other modules to use it through config.ids.{uids,gids} rather than `import relative-path/ids.nix'. svn path=/nixos/branches/modular-nixos/; revision=15796
2009-05-29 15:25:56 +01:00
nixos/ids: information when to use static uids/gids
2018-05-20 10:52:03 +01:00
# IMPORTANT!
# We only add static uids and gids for services where it is not feasible
# to change uids/gids on service start, in example a service with a lot of
# files. Please also check if the service is applicable for systemd's
# DynamicUser option and does not need a uid/gid allocation at all.
# Systemd can also change ownership of service directories using the
# RuntimeDirectory/StateDirectory options.
[bot] nixos/*: remove unused arguments in lambdas
2018-07-20 21:56:59 +01:00
{ lib, ... }:
* Move the uid/gid mappings into a module. This allows other modules to use it through config.ids.{uids,gids} rather than `import relative-path/ids.nix'. svn path=/nixos/branches/modular-nixos/; revision=15796
2009-05-29 15:25:56 +01:00
nixos/ids: Add types to allow overrides on static uids, gids
2019-11-18 08:08:10 +00:00
let
inherit (lib) types;
in
Update all legacy-style modules I.e., modules that use "require = [options]". Nowadays that should be written as { options = { ... }; config = { ... }; }; Also, use "imports" instead of "require" in places where we actually import another module.
2013-09-04 12:05:09 +01:00
{
* Move the uid/gid mappings into a module. This allows other modules to use it through config.ids.{uids,gids} rather than `import relative-path/ids.nix'. svn path=/nixos/branches/modular-nixos/; revision=15796
2009-05-29 15:25:56 +01:00
options = {
Get all lib functions from lib, not pkgs.lib, in modules
2014-05-05 19:58:51 +01:00
ids.uids = lib.mkOption {
Add lots of missing option types
2013-10-30 16:37:45 +00:00
internal = true;
* Move the uid/gid mappings into a module. This allows other modules to use it through config.ids.{uids,gids} rather than `import relative-path/ids.nix'. svn path=/nixos/branches/modular-nixos/; revision=15796
2009-05-29 15:25:56 +01:00
description = ''
The user IDs used in NixOS.
'';
nixos/ids: Add types to allow overrides on static uids, gids
2019-11-18 08:08:10 +00:00
type = types.attrsOf types.int;
* Move the uid/gid mappings into a module. This allows other modules to use it through config.ids.{uids,gids} rather than `import relative-path/ids.nix'. svn path=/nixos/branches/modular-nixos/; revision=15796
2009-05-29 15:25:56 +01:00
};
Get all lib functions from lib, not pkgs.lib, in modules
2014-05-05 19:58:51 +01:00
ids.gids = lib.mkOption {
Add lots of missing option types
2013-10-30 16:37:45 +00:00
internal = true;
* Move the uid/gid mappings into a module. This allows other modules to use it through config.ids.{uids,gids} rather than `import relative-path/ids.nix'. svn path=/nixos/branches/modular-nixos/; revision=15796
2009-05-29 15:25:56 +01:00
description = ''
The group IDs used in NixOS.
'';
nixos/ids: Add types to allow overrides on static uids, gids
2019-11-18 08:08:10 +00:00
type = types.attrsOf types.int;
* Move the uid/gid mappings into a module. This allows other modules to use it through config.ids.{uids,gids} rather than `import relative-path/ids.nix'. svn path=/nixos/branches/modular-nixos/; revision=15796
2009-05-29 15:25:56 +01:00
};
};
strip trailing whitespace; no functional change svn path=/nixos/trunk/; revision=29285
2011-09-14 19:20:50 +01:00
Update all legacy-style modules I.e., modules that use "require = [options]". Nowadays that should be written as { options = { ... }; config = { ... }; }; Also, use "imports" instead of "require" in places where we actually import another module.
2013-09-04 12:05:09 +01:00
config = {
* Declarative specification of user accounts. Jobs can now specify a list of user accounts that the job needs to run. For instance, the SSH daemon job says: { name = "sshd"; uid = (import ../system/ids.nix).uids.sshd; description = "SSH privilege separation user"; home = "/var/empty"; } The activation script creates the system users/groups and updates them as well. So a change in the Nix expression can be realised in /etc/{group,passwd} by running nixos-rebuild. svn path=/nixos/trunk/; revision=8846
2007-06-08 16:41:12 +01:00
Update all legacy-style modules I.e., modules that use "require = [options]". Nowadays that should be written as { options = { ... }; config = { ... }; }; Also, use "imports" instead of "require" in places where we actually import another module.
2013-09-04 12:05:09 +01:00
ids.uids = {
root = 0;
nixos: resolve uid/gid conflicts This patch resolves all uid/gid conflicts except for nobody/nogroup (seems to make sense that these are the same). All conflicts where determined mechanically, but resolutions were manual. This patch also marks uids/gids with no corresponding group/user as "unused" (aka. reserved). Briefly, - tss group conflicts with dhcpcd The tss group id conflicts with dhcpcd: assign a new number and add a corresponding tss user. - elasticsearch uid conflicts with haproxy gid - resolve firebird/munin conflict - fix fourstorehttp{,d} typo - fix ghostOne typo: the service module refers to gids.ghostone, so use that in ids - memcached uid conflicts with users gid - nagios uid conflicts with disks gid - nscd uid conflicts with wheel gid - ntp uid conflicts with tty gid - resolve postfix/postdrop id uid - redis uid conflicts with keys gid - sshd uid conflicts with kmem gid - tcryptd uid conflicts with openldap gid - unifi uid conflicts with docker gid - uptimed uid conflicts with utmp gid - zope2 uid conflicts with connman gid - tomcat uid/gid mismatch
2015-03-08 20:35:04 +00:00
#wheel = 1; # unused
#kmem = 2; # unused
#tty = 3; # unused
Update all legacy-style modules I.e., modules that use "require = [options]". Nowadays that should be written as { options = { ... }; config = { ... }; }; Also, use "imports" instead of "require" in places where we actually import another module.
2013-09-04 12:05:09 +01:00
messagebus = 4; # D-Bus
haldaemon = 5;
nixos: resolve uid/gid conflicts This patch resolves all uid/gid conflicts except for nobody/nogroup (seems to make sense that these are the same). All conflicts where determined mechanically, but resolutions were manual. This patch also marks uids/gids with no corresponding group/user as "unused" (aka. reserved). Briefly, - tss group conflicts with dhcpcd The tss group id conflicts with dhcpcd: assign a new number and add a corresponding tss user. - elasticsearch uid conflicts with haproxy gid - resolve firebird/munin conflict - fix fourstorehttp{,d} typo - fix ghostOne typo: the service module refers to gids.ghostone, so use that in ids - memcached uid conflicts with users gid - nagios uid conflicts with disks gid - nscd uid conflicts with wheel gid - ntp uid conflicts with tty gid - resolve postfix/postdrop id uid - redis uid conflicts with keys gid - sshd uid conflicts with kmem gid - tcryptd uid conflicts with openldap gid - unifi uid conflicts with docker gid - uptimed uid conflicts with utmp gid - zope2 uid conflicts with connman gid - tomcat uid/gid mismatch
2015-03-08 20:35:04 +00:00
#disk = 6; # unused
Update all legacy-style modules I.e., modules that use "require = [options]". Nowadays that should be written as { options = { ... }; config = { ... }; }; Also, use "imports" instead of "require" in places where we actually import another module.
2013-09-04 12:05:09 +01:00
vsftpd = 7;
ftp = 8;
bitlbee = 9;
nixos/ids: remove avahi uid/gid
2019-05-22 21:01:55 +01:00
#avahi = 10; # removed 2019-05-22
nixos: resolve uid/gid conflicts This patch resolves all uid/gid conflicts except for nobody/nogroup (seems to make sense that these are the same). All conflicts where determined mechanically, but resolutions were manual. This patch also marks uids/gids with no corresponding group/user as "unused" (aka. reserved). Briefly, - tss group conflicts with dhcpcd The tss group id conflicts with dhcpcd: assign a new number and add a corresponding tss user. - elasticsearch uid conflicts with haproxy gid - resolve firebird/munin conflict - fix fourstorehttp{,d} typo - fix ghostOne typo: the service module refers to gids.ghostone, so use that in ids - memcached uid conflicts with users gid - nagios uid conflicts with disks gid - nscd uid conflicts with wheel gid - ntp uid conflicts with tty gid - resolve postfix/postdrop id uid - redis uid conflicts with keys gid - sshd uid conflicts with kmem gid - tcryptd uid conflicts with openldap gid - unifi uid conflicts with docker gid - uptimed uid conflicts with utmp gid - zope2 uid conflicts with connman gid - tomcat uid/gid mismatch
2015-03-08 20:35:04 +00:00
nagios = 11;
Update all legacy-style modules I.e., modules that use "require = [options]". Nowadays that should be written as { options = { ... }; config = { ... }; }; Also, use "imports" instead of "require" in places where we actually import another module.
2013-09-04 12:05:09 +01:00
atd = 12;
nixos: resolve uid/gid conflicts This patch resolves all uid/gid conflicts except for nobody/nogroup (seems to make sense that these are the same). All conflicts where determined mechanically, but resolutions were manual. This patch also marks uids/gids with no corresponding group/user as "unused" (aka. reserved). Briefly, - tss group conflicts with dhcpcd The tss group id conflicts with dhcpcd: assign a new number and add a corresponding tss user. - elasticsearch uid conflicts with haproxy gid - resolve firebird/munin conflict - fix fourstorehttp{,d} typo - fix ghostOne typo: the service module refers to gids.ghostone, so use that in ids - memcached uid conflicts with users gid - nagios uid conflicts with disks gid - nscd uid conflicts with wheel gid - ntp uid conflicts with tty gid - resolve postfix/postdrop id uid - redis uid conflicts with keys gid - sshd uid conflicts with kmem gid - tcryptd uid conflicts with openldap gid - unifi uid conflicts with docker gid - uptimed uid conflicts with utmp gid - zope2 uid conflicts with connman gid - tomcat uid/gid mismatch
2015-03-08 20:35:04 +00:00
postfix = 13;
#postdrop = 14; # unused
Update all legacy-style modules I.e., modules that use "require = [options]". Nowadays that should be written as { options = { ... }; config = { ... }; }; Also, use "imports" instead of "require" in places where we actually import another module.
2013-09-04 12:05:09 +01:00
dovecot = 15;
tomcat = 16;
nixos: resolve uid/gid conflicts This patch resolves all uid/gid conflicts except for nobody/nogroup (seems to make sense that these are the same). All conflicts where determined mechanically, but resolutions were manual. This patch also marks uids/gids with no corresponding group/user as "unused" (aka. reserved). Briefly, - tss group conflicts with dhcpcd The tss group id conflicts with dhcpcd: assign a new number and add a corresponding tss user. - elasticsearch uid conflicts with haproxy gid - resolve firebird/munin conflict - fix fourstorehttp{,d} typo - fix ghostOne typo: the service module refers to gids.ghostone, so use that in ids - memcached uid conflicts with users gid - nagios uid conflicts with disks gid - nscd uid conflicts with wheel gid - ntp uid conflicts with tty gid - resolve postfix/postdrop id uid - redis uid conflicts with keys gid - sshd uid conflicts with kmem gid - tcryptd uid conflicts with openldap gid - unifi uid conflicts with docker gid - uptimed uid conflicts with utmp gid - zope2 uid conflicts with connman gid - tomcat uid/gid mismatch
2015-03-08 20:35:04 +00:00
#audio = 17; # unused
#floppy = 18; # unused
modules: HylaFAX server configuration This commit adds the following * the uucp user * options for HylaFAX server to control startup and modems * systemd services for HylaFAX server processes including faxgettys for modems * systemd services to maintain the HylaFAX spool area, including cleanup with faxcron and faxqclean * default configuration for all server processes for a minimal working configuration Some notes: * HylaFAX configuration cannot be initialized with faxsetup (as it would be common on other Linux distributions). The hylafaxplus package contains a template spool area. * Modems are controlled by faxgetty. Send-only configuration (modems controlled by faxq) is not supported by this configuration setup. * To enable the service, one or more modems must be defined with config.services.hylafax.modems . * Sending mail *should* work: HylaFAX will use whatever is in config.services.mail.sendmailSetuidWrapper.program unless overridden with the sendmailPath option. * The admin has to create a hosts.hfaxd file somewhere (e.g. in /etc) before enabling HylaFAX. This file controls access to the server (see hosts.hfaxd(5) ). Sadly, HylaFAX does not permit account-based access control as is accepts connections via TCP only. * Active fax polling should work; I can't test it. * Passive fax polling is not supported by HylaFAX. * Pager transmissions (with sendpage) are disabled by default. I have never tested or used these. * Incoming data/voice/"extern"al calls won't be handled by default. I have never tested or used these.
2018-08-04 16:08:54 +01:00
uucp = 19;
nixos: resolve uid/gid conflicts This patch resolves all uid/gid conflicts except for nobody/nogroup (seems to make sense that these are the same). All conflicts where determined mechanically, but resolutions were manual. This patch also marks uids/gids with no corresponding group/user as "unused" (aka. reserved). Briefly, - tss group conflicts with dhcpcd The tss group id conflicts with dhcpcd: assign a new number and add a corresponding tss user. - elasticsearch uid conflicts with haproxy gid - resolve firebird/munin conflict - fix fourstorehttp{,d} typo - fix ghostOne typo: the service module refers to gids.ghostone, so use that in ids - memcached uid conflicts with users gid - nagios uid conflicts with disks gid - nscd uid conflicts with wheel gid - ntp uid conflicts with tty gid - resolve postfix/postdrop id uid - redis uid conflicts with keys gid - sshd uid conflicts with kmem gid - tcryptd uid conflicts with openldap gid - unifi uid conflicts with docker gid - uptimed uid conflicts with utmp gid - zope2 uid conflicts with connman gid - tomcat uid/gid mismatch
2015-03-08 20:35:04 +00:00
#lp = 20; # unused
nixos: add optional process information hiding This module adds an option `security.hideProcessInformation` that, when enabled, restricts access to process information such as command-line arguments to the process owner. The module adds a static group "proc" whose members are exempt from process information hiding. Ideally, this feature would be implemented by simply adding the appropriate mount options to `fileSystems."/proc".fsOptions`, but this was found to not work in vmtests. To ensure that process information hiding is enforced, we use a systemd service unit that remounts `/proc` after `systemd-remount-fs.service` has completed. To verify the correctness of the feature, simple tests were added to nixos/tests/misc: the test ensures that unprivileged users cannot see process information owned by another user, while members of "proc" CAN. Thanks to @abbradar for feedback and suggestions.
2016-04-09 19:22:16 +01:00
#proc = 21; # unused
Update all legacy-style modules I.e., modules that use "require = [options]". Nowadays that should be written as { options = { ... }; config = { ... }; }; Also, use "imports" instead of "require" in places where we actually import another module.
2013-09-04 12:05:09 +01:00
pulseaudio = 22; # must match `pulseaudio' GID
gpsd = 23;
nixos: resolve uid/gid conflicts This patch resolves all uid/gid conflicts except for nobody/nogroup (seems to make sense that these are the same). All conflicts where determined mechanically, but resolutions were manual. This patch also marks uids/gids with no corresponding group/user as "unused" (aka. reserved). Briefly, - tss group conflicts with dhcpcd The tss group id conflicts with dhcpcd: assign a new number and add a corresponding tss user. - elasticsearch uid conflicts with haproxy gid - resolve firebird/munin conflict - fix fourstorehttp{,d} typo - fix ghostOne typo: the service module refers to gids.ghostone, so use that in ids - memcached uid conflicts with users gid - nagios uid conflicts with disks gid - nscd uid conflicts with wheel gid - ntp uid conflicts with tty gid - resolve postfix/postdrop id uid - redis uid conflicts with keys gid - sshd uid conflicts with kmem gid - tcryptd uid conflicts with openldap gid - unifi uid conflicts with docker gid - uptimed uid conflicts with utmp gid - zope2 uid conflicts with connman gid - tomcat uid/gid mismatch
2015-03-08 20:35:04 +00:00
#cdrom = 24; # unused
#tape = 25; # unused
#video = 26; # unused
#dialout = 27; # unused
Update all legacy-style modules I.e., modules that use "require = [options]". Nowadays that should be written as { options = { ... }; config = { ... }; }; Also, use "imports" instead of "require" in places where we actually import another module.
2013-09-04 12:05:09 +01:00
polkituser = 28;
nixos: resolve uid/gid conflicts This patch resolves all uid/gid conflicts except for nobody/nogroup (seems to make sense that these are the same). All conflicts where determined mechanically, but resolutions were manual. This patch also marks uids/gids with no corresponding group/user as "unused" (aka. reserved). Briefly, - tss group conflicts with dhcpcd The tss group id conflicts with dhcpcd: assign a new number and add a corresponding tss user. - elasticsearch uid conflicts with haproxy gid - resolve firebird/munin conflict - fix fourstorehttp{,d} typo - fix ghostOne typo: the service module refers to gids.ghostone, so use that in ids - memcached uid conflicts with users gid - nagios uid conflicts with disks gid - nscd uid conflicts with wheel gid - ntp uid conflicts with tty gid - resolve postfix/postdrop id uid - redis uid conflicts with keys gid - sshd uid conflicts with kmem gid - tcryptd uid conflicts with openldap gid - unifi uid conflicts with docker gid - uptimed uid conflicts with utmp gid - zope2 uid conflicts with connman gid - tomcat uid/gid mismatch
2015-03-08 20:35:04 +00:00
#utmp = 29; # unused
nixos ddclient: support multiple domains and run via systemd timer a) Some providers can update multiple domains - support that. b) Make "zone" and "script" configurable. Some providers require these. c) Instead of leaving the ddclient daemon running all the time, use a systemd timer to kick it off. d) Don't use a predefined user - run everything via DynamicUser e) Add documentation
2018-03-12 15:25:28 +00:00
# ddclient = 30; # converted to DynamicUser = true
Update all legacy-style modules I.e., modules that use "require = [options]". Nowadays that should be written as { options = { ... }; config = { ... }; }; Also, use "imports" instead of "require" in places where we actually import another module.
2013-09-04 12:05:09 +01:00
davfs2 = 31;
nixos: resolve uid/gid conflicts This patch resolves all uid/gid conflicts except for nobody/nogroup (seems to make sense that these are the same). All conflicts where determined mechanically, but resolutions were manual. This patch also marks uids/gids with no corresponding group/user as "unused" (aka. reserved). Briefly, - tss group conflicts with dhcpcd The tss group id conflicts with dhcpcd: assign a new number and add a corresponding tss user. - elasticsearch uid conflicts with haproxy gid - resolve firebird/munin conflict - fix fourstorehttp{,d} typo - fix ghostOne typo: the service module refers to gids.ghostone, so use that in ids - memcached uid conflicts with users gid - nagios uid conflicts with disks gid - nscd uid conflicts with wheel gid - ntp uid conflicts with tty gid - resolve postfix/postdrop id uid - redis uid conflicts with keys gid - sshd uid conflicts with kmem gid - tcryptd uid conflicts with openldap gid - unifi uid conflicts with docker gid - uptimed uid conflicts with utmp gid - zope2 uid conflicts with connman gid - tomcat uid/gid mismatch
2015-03-08 20:35:04 +00:00
#disnix = 33; # unused
Update all legacy-style modules I.e., modules that use "require = [options]". Nowadays that should be written as { options = { ... }; config = { ... }; }; Also, use "imports" instead of "require" in places where we actually import another module.
2013-09-04 12:05:09 +01:00
osgi = 34;
tor = 35;
cups = 36;
Fix some uid/gid attributes to match the actual user/group name
2014-04-29 09:51:42 +01:00
foldingathome = 37;
Update all legacy-style modules I.e., modules that use "require = [options]". Nowadays that should be written as { options = { ... }; config = { ... }; }; Also, use "imports" instead of "require" in places where we actually import another module.
2013-09-04 12:05:09 +01:00
sabnzbd = 38;
kdm: drop service
2017-02-11 18:55:09 +00:00
#kdm = 39; # dropped in 17.03
ghostOne: remove broken and unmaintained
2017-12-27 14:28:11 +00:00
#ghostone = 40; # dropped in 18.03
Update all legacy-style modules I.e., modules that use "require = [options]". Nowadays that should be written as { options = { ... }; config = { ... }; }; Also, use "imports" instead of "require" in places where we actually import another module.
2013-09-04 12:05:09 +01:00
git = 41;
rdf4store: remove pkg and service modules (#74214)
2019-12-08 19:33:51 +00:00
#fourstore = 42; # dropped in 20.03
#fourstorehttp = 43; # dropped in 20.03
Update all legacy-style modules I.e., modules that use "require = [options]". Nowadays that should be written as { options = { ... }; config = { ... }; }; Also, use "imports" instead of "require" in places where we actually import another module.
2013-09-04 12:05:09 +01:00
virtuoso = 44;
rtkit = 45;
dovecot2 = 46;
dovenull2 = 47;
prayer = 49;
mpd = 50;
clamav = 51;
fprot = 52;
bind = 53;
wwwrun = 54;
nixos: resolve uid/gid conflicts This patch resolves all uid/gid conflicts except for nobody/nogroup (seems to make sense that these are the same). All conflicts where determined mechanically, but resolutions were manual. This patch also marks uids/gids with no corresponding group/user as "unused" (aka. reserved). Briefly, - tss group conflicts with dhcpcd The tss group id conflicts with dhcpcd: assign a new number and add a corresponding tss user. - elasticsearch uid conflicts with haproxy gid - resolve firebird/munin conflict - fix fourstorehttp{,d} typo - fix ghostOne typo: the service module refers to gids.ghostone, so use that in ids - memcached uid conflicts with users gid - nagios uid conflicts with disks gid - nscd uid conflicts with wheel gid - ntp uid conflicts with tty gid - resolve postfix/postdrop id uid - redis uid conflicts with keys gid - sshd uid conflicts with kmem gid - tcryptd uid conflicts with openldap gid - unifi uid conflicts with docker gid - uptimed uid conflicts with utmp gid - zope2 uid conflicts with connman gid - tomcat uid/gid mismatch
2015-03-08 20:35:04 +00:00
#adm = 55; # unused
Update all legacy-style modules I.e., modules that use "require = [options]". Nowadays that should be written as { options = { ... }; config = { ... }; }; Also, use "imports" instead of "require" in places where we actually import another module.
2013-09-04 12:05:09 +01:00
spamd = 56;
nixos: resolve uid/gid conflicts This patch resolves all uid/gid conflicts except for nobody/nogroup (seems to make sense that these are the same). All conflicts where determined mechanically, but resolutions were manual. This patch also marks uids/gids with no corresponding group/user as "unused" (aka. reserved). Briefly, - tss group conflicts with dhcpcd The tss group id conflicts with dhcpcd: assign a new number and add a corresponding tss user. - elasticsearch uid conflicts with haproxy gid - resolve firebird/munin conflict - fix fourstorehttp{,d} typo - fix ghostOne typo: the service module refers to gids.ghostone, so use that in ids - memcached uid conflicts with users gid - nagios uid conflicts with disks gid - nscd uid conflicts with wheel gid - ntp uid conflicts with tty gid - resolve postfix/postdrop id uid - redis uid conflicts with keys gid - sshd uid conflicts with kmem gid - tcryptd uid conflicts with openldap gid - unifi uid conflicts with docker gid - uptimed uid conflicts with utmp gid - zope2 uid conflicts with connman gid - tomcat uid/gid mismatch
2015-03-08 20:35:04 +00:00
#networkmanager = 57; # unused
Update all legacy-style modules I.e., modules that use "require = [options]". Nowadays that should be written as { options = { ... }; config = { ... }; }; Also, use "imports" instead of "require" in places where we actually import another module.
2013-09-04 12:05:09 +01:00
nslcd = 58;
sane service: add saned support
2016-11-11 00:49:02 +00:00
scanner = 59;
Update all legacy-style modules I.e., modules that use "require = [options]". Nowadays that should be written as { options = { ... }; config = { ... }; }; Also, use "imports" instead of "require" in places where we actually import another module.
2013-09-04 12:05:09 +01:00
nginx = 60;
chrony = 61;
nixos: resolve uid/gid conflicts This patch resolves all uid/gid conflicts except for nobody/nogroup (seems to make sense that these are the same). All conflicts where determined mechanically, but resolutions were manual. This patch also marks uids/gids with no corresponding group/user as "unused" (aka. reserved). Briefly, - tss group conflicts with dhcpcd The tss group id conflicts with dhcpcd: assign a new number and add a corresponding tss user. - elasticsearch uid conflicts with haproxy gid - resolve firebird/munin conflict - fix fourstorehttp{,d} typo - fix ghostOne typo: the service module refers to gids.ghostone, so use that in ids - memcached uid conflicts with users gid - nagios uid conflicts with disks gid - nscd uid conflicts with wheel gid - ntp uid conflicts with tty gid - resolve postfix/postdrop id uid - redis uid conflicts with keys gid - sshd uid conflicts with kmem gid - tcryptd uid conflicts with openldap gid - unifi uid conflicts with docker gid - uptimed uid conflicts with utmp gid - zope2 uid conflicts with connman gid - tomcat uid/gid mismatch
2015-03-08 20:35:04 +00:00
#systemd-journal = 62; # unused
Update all legacy-style modules I.e., modules that use "require = [options]". Nowadays that should be written as { options = { ... }; config = { ... }; }; Also, use "imports" instead of "require" in places where we actually import another module.
2013-09-04 12:05:09 +01:00
smtpd = 63;
smtpq = 64;
supybot = 65;
iodined = 66;
nixos: resolve uid/gid conflicts This patch resolves all uid/gid conflicts except for nobody/nogroup (seems to make sense that these are the same). All conflicts where determined mechanically, but resolutions were manual. This patch also marks uids/gids with no corresponding group/user as "unused" (aka. reserved). Briefly, - tss group conflicts with dhcpcd The tss group id conflicts with dhcpcd: assign a new number and add a corresponding tss user. - elasticsearch uid conflicts with haproxy gid - resolve firebird/munin conflict - fix fourstorehttp{,d} typo - fix ghostOne typo: the service module refers to gids.ghostone, so use that in ids - memcached uid conflicts with users gid - nagios uid conflicts with disks gid - nscd uid conflicts with wheel gid - ntp uid conflicts with tty gid - resolve postfix/postdrop id uid - redis uid conflicts with keys gid - sshd uid conflicts with kmem gid - tcryptd uid conflicts with openldap gid - unifi uid conflicts with docker gid - uptimed uid conflicts with utmp gid - zope2 uid conflicts with connman gid - tomcat uid/gid mismatch
2015-03-08 20:35:04 +00:00
#libvirtd = 67; # unused
Update all legacy-style modules I.e., modules that use "require = [options]". Nowadays that should be written as { options = { ... }; config = { ... }; }; Also, use "imports" instead of "require" in places where we actually import another module.
2013-09-04 12:05:09 +01:00
graphite = 68;
nodePackages.statsd: remove The package/service is broken. Upstream is dead
2018-11-14 18:27:09 +00:00
#statsd = 69; # removed 2018-11-14
Update all legacy-style modules I.e., modules that use "require = [options]". Nowadays that should be written as { options = { ... }; config = { ... }; }; Also, use "imports" instead of "require" in places where we actually import another module.
2013-09-04 12:05:09 +01:00
transmission = 70;
postgres = 71;
nixos: resolve uid/gid conflicts This patch resolves all uid/gid conflicts except for nobody/nogroup (seems to make sense that these are the same). All conflicts where determined mechanically, but resolutions were manual. This patch also marks uids/gids with no corresponding group/user as "unused" (aka. reserved). Briefly, - tss group conflicts with dhcpcd The tss group id conflicts with dhcpcd: assign a new number and add a corresponding tss user. - elasticsearch uid conflicts with haproxy gid - resolve firebird/munin conflict - fix fourstorehttp{,d} typo - fix ghostOne typo: the service module refers to gids.ghostone, so use that in ids - memcached uid conflicts with users gid - nagios uid conflicts with disks gid - nscd uid conflicts with wheel gid - ntp uid conflicts with tty gid - resolve postfix/postdrop id uid - redis uid conflicts with keys gid - sshd uid conflicts with kmem gid - tcryptd uid conflicts with openldap gid - unifi uid conflicts with docker gid - uptimed uid conflicts with utmp gid - zope2 uid conflicts with connman gid - tomcat uid/gid mismatch
2015-03-08 20:35:04 +00:00
#vboxusers = 72; # unused
#vboxsf = 73; # unused
nixos/samba: remove services.samba.defaultShare option It's not that difficult to define shares using standard samba config file syntax, so why do we need the semi-configurable .defaultShare option? Also: * It uses /home/smbd and I think /home should be reserved for real human users. * If enabled, it breaks the assumption that .extraConfig continues in the [global] section. Without .defaultShare there is no need for the "smbguest" user and group either, mark them as unused.
2014-09-05 23:45:47 +01:00
smbguest = 74; # unused
Update all legacy-style modules I.e., modules that use "require = [options]". Nowadays that should be written as { options = { ... }; config = { ... }; }; Also, use "imports" instead of "require" in places where we actually import another module.
2013-09-04 12:05:09 +01:00
varnish = 75;
nixos: overhaul datadog module This overhauls the Datadog module a bit to be much more useful. In particular, it adds support for nginx and postgresql monitoring integrations to dd-agent. These have to exist in separate files under /etc/dd-agent, so the module just exposes then as separate options. In the future, more integrations could be added this way. In the process of doing this, I also had to rename the dd-agent user to datadog. Note the UIDs did not change, so this is strictly backwards compatible. The reason for this is to make it easier to create a 'datadog' postgres user with access to pg_stats, as 'dd-agent' typically isn't a valid username. This allows the out of the box configurations to be used. Signed-off-by: Austin Seipp <aseipp@pobox.com>
2014-05-02 06:43:27 +01:00
datadog = 76;
Update all legacy-style modules I.e., modules that use "require = [options]". Nowadays that should be written as { options = { ... }; config = { ... }; }; Also, use "imports" instead of "require" in places where we actually import another module.
2013-09-04 12:05:09 +01:00
lighttpd = 77;
lightdm = 78;
freenet = 79;
ircd = 80;
bacula = 81;
almir: also remove the corresponding module. The almir package was removed in 30291227f2411abaca097773eedb49b8f259e297 at about 2017-08 This module can no more be used without it.
2018-03-25 20:39:02 +01:00
#almir = 82; # removed 2018-03-25, the almir package was removed in 30291227f2411abaca097773eedb49b8f259e297 during 2017-08
Update all legacy-style modules I.e., modules that use "require = [options]". Nowadays that should be written as { options = { ... }; config = { ... }; }; Also, use "imports" instead of "require" in places where we actually import another module.
2013-09-04 12:05:09 +01:00
deluge = 83;
mysql = 84;
rabbitmq = 85;
activemq = 86;
gnunet = 87;
oidentd = 88;
quassel = 89;
amule = 90;
minidlna = 91;
elasticsearch = 92;
modules/misc/ids.nix: document the fact that the uid for tcpcryptd is hard-coded in the daemon
2013-09-17 10:22:31 +01:00
tcpcryptd = 93; # tcpcryptd uses a hard-coded uid. We patch it in Nixpkgs to match this choice.
firebird service many suggestions contributed by bjornfor and edolstra
2013-10-05 22:07:22 +01:00
firebird = 95;
nixos: resolve uid/gid conflicts This patch resolves all uid/gid conflicts except for nobody/nogroup (seems to make sense that these are the same). All conflicts where determined mechanically, but resolutions were manual. This patch also marks uids/gids with no corresponding group/user as "unused" (aka. reserved). Briefly, - tss group conflicts with dhcpcd The tss group id conflicts with dhcpcd: assign a new number and add a corresponding tss user. - elasticsearch uid conflicts with haproxy gid - resolve firebird/munin conflict - fix fourstorehttp{,d} typo - fix ghostOne typo: the service module refers to gids.ghostone, so use that in ids - memcached uid conflicts with users gid - nagios uid conflicts with disks gid - nscd uid conflicts with wheel gid - ntp uid conflicts with tty gid - resolve postfix/postdrop id uid - redis uid conflicts with keys gid - sshd uid conflicts with kmem gid - tcryptd uid conflicts with openldap gid - unifi uid conflicts with docker gid - uptimed uid conflicts with utmp gid - zope2 uid conflicts with connman gid - tomcat uid/gid mismatch
2015-03-08 20:35:04 +00:00
#keys = 96; # unused
nixos/haproxy: Revive the haproxy user and group Running haproxy with "DynamicUser = true" doesn't really work, since it prohibits specifying a TLS certificate bundle with limited permissions. This revives the haproxy user and group, but makes them dynamically allocated by NixOS, rather than statically allocated. It also adds options to specify which user and group haproxy runs as.
2020-03-11 18:52:37 +00:00
#haproxy = 97; # dynamically allocated as of 2020-03-11
nixos/mongodb: set static uid to work with #1076
2013-11-07 10:25:14 +00:00
mongodb = 98;
Added openldap user, group and configure service so its not running as root.
2013-11-28 21:21:50 +00:00
openldap = 99;
nixos: resolve uid/gid conflicts This patch resolves all uid/gid conflicts except for nobody/nogroup (seems to make sense that these are the same). All conflicts where determined mechanically, but resolutions were manual. This patch also marks uids/gids with no corresponding group/user as "unused" (aka. reserved). Briefly, - tss group conflicts with dhcpcd The tss group id conflicts with dhcpcd: assign a new number and add a corresponding tss user. - elasticsearch uid conflicts with haproxy gid - resolve firebird/munin conflict - fix fourstorehttp{,d} typo - fix ghostOne typo: the service module refers to gids.ghostone, so use that in ids - memcached uid conflicts with users gid - nagios uid conflicts with disks gid - nscd uid conflicts with wheel gid - ntp uid conflicts with tty gid - resolve postfix/postdrop id uid - redis uid conflicts with keys gid - sshd uid conflicts with kmem gid - tcryptd uid conflicts with openldap gid - unifi uid conflicts with docker gid - uptimed uid conflicts with utmp gid - zope2 uid conflicts with connman gid - tomcat uid/gid mismatch
2015-03-08 20:35:04 +00:00
#users = 100; # unused
nixos/cgminer: fix restarts, set uid
2014-01-12 23:18:05 +00:00
cgminer = 101;
nixos: add uid/gid for munin To be compatible with eb2f44c18cb6d300e965308547d8a4dea110f519 (Generate /etc/passwd and /etc/group at build time). Without this you'll get this: $ nixos-rebuild build [...] user-thrown exception: The option `users.extraGroups.unnamed-9.1.gid' is used but not defined.
2014-02-07 22:08:15 +00:00
munin = 102;
nixos: add uid for logcheck and only create a user for the default user
2014-02-11 13:19:06 +00:00
logcheck = 103;
Add module to enable the server for the ssh substituter
2014-02-20 17:34:54 +00:00
nix-ssh = 104;
nixos: Assign uid/gid to dictd's service user.
2014-02-21 11:40:05 +00:00
dictd = 105;
couchdb: add ids
2014-02-27 13:33:30 +00:00
couchdb = 106;
searx: add module
2014-03-07 19:09:59 +00:00
searx = 107;
UID/GID fix for kippo
2014-03-12 07:32:56 +00:00
kippo = 108;
Add jenkins continuous integration server and user. By default the jenkins server is executed under the user "jenkins". Which can be configured using users.jenkins.* options. If a different user is requested by changing services.jenkins.user then none of the users.jenkins options apply. This patch does not include jenkins slave configuration. Some config options will probably change when this is implemented. Aspects like the user and environment are typically identical between slave and master. The service configs are different. The design is for users.jenkins to cover the shared aspects while services.jenkins and services.jenkins-slave cover the master and slave specific aspects, respectively. Another option would be to place everything under services.jenkins and have a config that selects master vs slave.
2014-02-10 20:07:12 +00:00
jenkins = 109;
Merge branch 'pkgs/systemd/journald_http_gateway' of git://github.com/offlinehacker/nixpkgs systemd: python support & journal http gateway Conflicts: nixos/modules/misc/ids.nix
2014-03-14 23:16:59 +00:00
systemd-journal-gateway = 110;
notbit: removed dead package The Bitmessage protocol v3 became mandatory on 16 Nov 2014 and notbit does not support it, nor has there been any activity in the project repository since then.
2016-01-07 03:34:31 +00:00
#notbit = 111; # unused
aerospike: init at 4.2.0.4 Co-authored-by: Volth <volth@webmaster.ms>
2018-07-16 01:40:53 +01:00
aerospike = 111;
Add ngircd module
2014-03-20 02:04:35 +00:00
ngircd = 112;
nixos/btsync: remove Remove the btsync module. Bittorrent Sync was renamed to Resilio Sync in 2016, which is supported by the resilio module. Since Resilio Sync had some security updates since 2016, it is not safe to run Bittorrent Sync anymore.
2019-06-02 19:18:15 +01:00
#btsync = 113; # unused
nixos: add minecraft-server service Signed-off-by: Austin Seipp <aseipp@pobox.com>
2014-03-29 09:48:33 +00:00
minecraft = 114;
vault: run as an unpivileged user
2017-06-27 15:54:25 +01:00
vault = 115;
Merge branch 'rippled' of git://github.com/ehmry/nixpkgs rippled: initial pkg and module expressions Had to change the rippled uid. Conflicts: nixos/modules/misc/ids.nix
2014-04-05 19:23:29 +01:00
rippled = 116;
Merge branch 'murmur' of git://github.com/thoughtpolice/nixpkgs nixos: add Murmur module (Mumble chat) Conflicts: nixos/modules/misc/ids.nix
2014-04-05 20:18:14 +01:00
murmur = 117;
nixos: reserve some uids/gids I have some NixOS modules that I keep out of tree, and having UIDs/GIDs reserved is quite helpful. Signed-off-by: Austin Seipp <aseipp@pobox.com>
2014-04-02 17:01:25 +01:00
foundationdb = 118;
newrelic = 119;
starbound = 120;
Allocate system uids/gids between 400 and 500 Previously it was between 100 and 500, but this can already collide with the static uids/guid in misc/ids.nix.
2014-04-29 09:45:06 +01:00
hydra = 122;
spiped = 123;
Add TeamSpeak 3 server & service module (close #2056) Conflicts (trivial): lib/maintainers.nix nixos/modules/misc/ids.nix
2014-03-29 00:40:30 +00:00
teamspeak = 124;
nixos: add influxdb module
2014-05-27 21:54:43 +01:00
influxdb = 125;
nsd-service: add service module for nsd
2014-06-12 10:20:43 +01:00
nsd = 126;
nixos: add gitolite module Signed-off-by: Austin Seipp <aseipp@pobox.com>
2014-06-26 04:32:45 +01:00
gitolite = 127;
Merge remote-tracking branch 'nixos/master' into feature/add-znc-module Conflicts: nixos/modules/misc/ids.nix
2014-07-03 17:30:11 +01:00
znc = 128;
polipo: new service expression
2014-07-15 15:16:58 +01:00
polipo = 129;
Add NixOS module for Mopidy, a music player daemon
2014-07-28 18:52:32 +01:00
mopidy = 130;
nixos: resolve uid/gid conflicts This patch resolves all uid/gid conflicts except for nobody/nogroup (seems to make sense that these are the same). All conflicts where determined mechanically, but resolutions were manual. This patch also marks uids/gids with no corresponding group/user as "unused" (aka. reserved). Briefly, - tss group conflicts with dhcpcd The tss group id conflicts with dhcpcd: assign a new number and add a corresponding tss user. - elasticsearch uid conflicts with haproxy gid - resolve firebird/munin conflict - fix fourstorehttp{,d} typo - fix ghostOne typo: the service module refers to gids.ghostone, so use that in ids - memcached uid conflicts with users gid - nagios uid conflicts with disks gid - nscd uid conflicts with wheel gid - ntp uid conflicts with tty gid - resolve postfix/postdrop id uid - redis uid conflicts with keys gid - sshd uid conflicts with kmem gid - tcryptd uid conflicts with openldap gid - unifi uid conflicts with docker gid - uptimed uid conflicts with utmp gid - zope2 uid conflicts with connman gid - tomcat uid/gid mismatch
2015-03-08 20:35:04 +00:00
#docker = 131; # unused
gdm: Add very experimental display manager
2014-04-02 17:21:00 +01:00
gdm = 132;
nixos/dhcpd: Use dhcp user instead of nobody
2014-06-25 09:28:53 +01:00
dhcpd = 133;
siproxd: initial service expression
2014-07-10 19:08:38 +01:00
siproxd = 134;
Add mlmmj package and nixos module.
2014-07-08 23:43:26 +01:00
mlmmj = 135;
nixos: add neo4j database module
2014-08-16 22:53:26 +01:00
neo4j = 136;
Add NixOS module for Riemann monitoring server.
2014-08-23 16:04:34 +01:00
riemann = 137;
Add NixOS module for the Riemann dashboard server
2014-08-23 16:39:45 +01:00
riemanndash = 138;
nixos/radvd: Convert to a systemd unit Additionally, remove the automatic initialization of the ipv6 forwarding sysctl as this should be handled by the end user. This really should not be an issue as most people running radvd are likely forwarding ipv6 packets.
2014-06-27 07:45:04 +01:00
radvd = 139;
Zookeeper
2014-08-24 16:43:45 +01:00
zookeeper = 140;
dnsmasq: upgrade to 2.71, fixed dnsmasq module * The module now has systemd config * Add resolveLocalQueries option which sets up it as a dns server for local host (including reasonable setup of resolvconf) * Add "dnsmasq" user for running daemon * Enabled dbus and dnssec support for the package Conflicts: nixos/modules/misc/ids.nix
2014-07-02 23:59:35 +01:00
dnsmasq = 141;
Add IDs for uhub service
2014-09-01 07:53:00 +01:00
uhub = 142;
nixos/ids: Add consul
2014-09-26 09:44:09 +01:00
yandexdisk = 143;
modules: add mxisd with test
2018-11-04 21:18:06 +00:00
mxisd = 144; # was once collectd
nixos/ids: Add consul
2014-09-26 09:44:09 +01:00
consul = 145;
mailpile: add module
2014-09-26 09:03:29 +01:00
mailpile = 146;
nixos: add redmine service
2014-10-07 09:53:01 +01:00
redmine = 147;
seeks: nixos module
2014-10-06 20:25:10 +01:00
seeks = 148;
nixos: prosody was clashing with seeks unix ids
2014-10-20 16:22:01 +01:00
prosody = 149;
i2pd: added package, service
2014-11-09 08:44:47 +00:00
i2pd = 150;
nixos/ids: Fix systemd ids
2014-11-19 23:01:44 +00:00
systemd-network = 152;
systemd-resolve = 153;
systemd-timesync = 154;
initial liquidsoap service expression
2014-11-20 22:30:24 +00:00
liquidsoap = 155;
nixos: add etcd module
2014-11-15 15:27:27 +00:00
etcd = 156;
hbase: New package and NixOS module
2014-11-20 11:29:07 +00:00
hbase = 158;
opentsdb: New package and NixOS module
2014-11-20 12:00:53 +00:00
opentsdb = 159;
scollector: New NixOS module
2014-11-20 14:38:04 +00:00
scollector = 160;
Add a NixOS module to run bosun
2014-11-20 14:49:45 +00:00
bosun = 161;
nixos/kubernetes: fix user id
2014-11-29 15:46:39 +00:00
kubernetes = 162;
nixos: add peerflix module
2014-12-01 15:40:42 +00:00
peerflix = 163;
nixos: add chronos service
2014-12-03 14:49:14 +00:00
chronos = 164;
nixos: Add gitlab and gitlab-shell I had to make several adjustments to make it work with nixos: * Replace relative config file lookups with ENV variable. * Modify gitlab-shell to not clear then environment when running pre-receive. * Modify gitlab-shell to write some environment variables into the .authorized_keys file to make sure gitlab-shell reads the correct config file. * Log unicorn output to syslog. I tried various ways of adding a syslog package but the bundler would not pick them up. Please fix in a better way if possible. * Gitlab-runner program wrapper. This is useful to run e.g. backups etc. with the correct environment set up.
2014-10-25 17:22:49 +01:00
gitlab = 165;
nixos: tox-bootstrapd service
2014-12-20 22:38:52 +00:00
tox-bootstrapd = 166;
nixos: add cadvisor service
2014-12-28 19:21:41 +00:00
cadvisor = 167;
nixos: adding nylon service with uid,gid
2015-01-14 21:08:19 +00:00
nylon = 168;
apache-kafka: New service for Apache Kafka
2015-01-28 22:07:27 +00:00
apache-kafka = 169;
panamax: remove packages, module and test was broken and depends on (deprecated) fleet packages: panamax_api, panamax_ui
2018-05-04 23:22:18 +01:00
#panamax = 170; # unused
exim: add version 4.85 incl. nixos module
2015-02-18 18:55:07 +00:00
exim = 172;
nixos: resolve uid/gid conflicts This patch resolves all uid/gid conflicts except for nobody/nogroup (seems to make sense that these are the same). All conflicts where determined mechanically, but resolutions were manual. This patch also marks uids/gids with no corresponding group/user as "unused" (aka. reserved). Briefly, - tss group conflicts with dhcpcd The tss group id conflicts with dhcpcd: assign a new number and add a corresponding tss user. - elasticsearch uid conflicts with haproxy gid - resolve firebird/munin conflict - fix fourstorehttp{,d} typo - fix ghostOne typo: the service module refers to gids.ghostone, so use that in ids - memcached uid conflicts with users gid - nagios uid conflicts with disks gid - nscd uid conflicts with wheel gid - ntp uid conflicts with tty gid - resolve postfix/postdrop id uid - redis uid conflicts with keys gid - sshd uid conflicts with kmem gid - tcryptd uid conflicts with openldap gid - unifi uid conflicts with docker gid - uptimed uid conflicts with utmp gid - zope2 uid conflicts with connman gid - tomcat uid/gid mismatch
2015-03-08 20:35:04 +00:00
#fleet = 173; # unused
#input = 174; # unused
nixos/sddm: add display manager
2015-03-02 17:58:35 +00:00
sddm = 175;
nixos: resolve uid/gid conflicts This patch resolves all uid/gid conflicts except for nobody/nogroup (seems to make sense that these are the same). All conflicts where determined mechanically, but resolutions were manual. This patch also marks uids/gids with no corresponding group/user as "unused" (aka. reserved). Briefly, - tss group conflicts with dhcpcd The tss group id conflicts with dhcpcd: assign a new number and add a corresponding tss user. - elasticsearch uid conflicts with haproxy gid - resolve firebird/munin conflict - fix fourstorehttp{,d} typo - fix ghostOne typo: the service module refers to gids.ghostone, so use that in ids - memcached uid conflicts with users gid - nagios uid conflicts with disks gid - nscd uid conflicts with wheel gid - ntp uid conflicts with tty gid - resolve postfix/postdrop id uid - redis uid conflicts with keys gid - sshd uid conflicts with kmem gid - tcryptd uid conflicts with openldap gid - unifi uid conflicts with docker gid - uptimed uid conflicts with utmp gid - zope2 uid conflicts with connman gid - tomcat uid/gid mismatch
2015-03-08 20:35:04 +00:00
tss = 176;
nixos/memcached: make unix sockets usuable before: - /var/run/memcached is a bad default for a socket path, since its parent directory must be writeable by memcached. - Socket directory was not created by the module itself -> this was left as a burden to the user? - Having a static uid with a dynamic user name is not very useful. after: - Replace services.memcached.socket by a boolean flag. This simplifies our code, since we do not have to check if the user specifies a path with a parent directory that should be owned by memcached (/run/memcached/memcached.sock -> /run/memcached). - Remove fixed uid/gid allocation. The only file ever owned by the daemon is the socket that will be recreated on every start. Therefore user and group ids do not need to be static. - only create the memcached user, if the user has not specified a different one. The major use case for changing option is to allow existing services (such as php-fpm) opening the local unix socket. If we would unconditionally create a user that option would be useless.
2018-01-03 11:10:45 +00:00
#memcached = 177; removed 2018-01-03
nixos: resolve uid/gid conflicts This patch resolves all uid/gid conflicts except for nobody/nogroup (seems to make sense that these are the same). All conflicts where determined mechanically, but resolutions were manual. This patch also marks uids/gids with no corresponding group/user as "unused" (aka. reserved). Briefly, - tss group conflicts with dhcpcd The tss group id conflicts with dhcpcd: assign a new number and add a corresponding tss user. - elasticsearch uid conflicts with haproxy gid - resolve firebird/munin conflict - fix fourstorehttp{,d} typo - fix ghostOne typo: the service module refers to gids.ghostone, so use that in ids - memcached uid conflicts with users gid - nagios uid conflicts with disks gid - nscd uid conflicts with wheel gid - ntp uid conflicts with tty gid - resolve postfix/postdrop id uid - redis uid conflicts with keys gid - sshd uid conflicts with kmem gid - tcryptd uid conflicts with openldap gid - unifi uid conflicts with docker gid - uptimed uid conflicts with utmp gid - zope2 uid conflicts with connman gid - tomcat uid/gid mismatch
2015-03-08 20:35:04 +00:00
ntp = 179;
zabbix = 180;
nixos/redis: remove static uid/gid assignment all files are chowned on startup
2018-01-03 10:15:47 +00:00
#redis = 181; removed 2018-01-03
nixos: resolve uid/gid conflicts This patch resolves all uid/gid conflicts except for nobody/nogroup (seems to make sense that these are the same). All conflicts where determined mechanically, but resolutions were manual. This patch also marks uids/gids with no corresponding group/user as "unused" (aka. reserved). Briefly, - tss group conflicts with dhcpcd The tss group id conflicts with dhcpcd: assign a new number and add a corresponding tss user. - elasticsearch uid conflicts with haproxy gid - resolve firebird/munin conflict - fix fourstorehttp{,d} typo - fix ghostOne typo: the service module refers to gids.ghostone, so use that in ids - memcached uid conflicts with users gid - nagios uid conflicts with disks gid - nscd uid conflicts with wheel gid - ntp uid conflicts with tty gid - resolve postfix/postdrop id uid - redis uid conflicts with keys gid - sshd uid conflicts with kmem gid - tcryptd uid conflicts with openldap gid - unifi uid conflicts with docker gid - uptimed uid conflicts with utmp gid - zope2 uid conflicts with connman gid - tomcat uid/gid mismatch
2015-03-08 20:35:04 +00:00
unifi = 183;
uptimed = 184;
zope2 = 185;
Add ripple data api package and nixos service
2015-03-22 22:12:11 +00:00
ripple-data-api = 186;
Add MediaTomb service
2015-03-27 10:48:50 +00:00
mediatomb = 187;
nixos/rdnssd: Major refactoring This updates rdnssd to the following: * Using the systemd interfaces directly * Using the rdnssd user instead of the root user * Integrating with resolvconf instead of writing directly to /etc/resolv.conf
2015-04-05 05:20:04 +01:00
rdnssd = 188;
ihaskell: re-enable
2017-11-06 06:29:56 +00:00
ihaskell = 189;
i2p: add nixos service
2015-04-15 11:52:06 +01:00
i2p = 190;
lambdabot: add nixos service
2015-04-14 00:06:37 +01:00
lambdabot = 191;
Added NixOS module for Asterisk server
2015-04-16 23:53:26 +01:00
asterisk = 192;
plex: init at 0.9.11.16.958 Added a package and module for Plex Media Server, an application for managing media collections across multiple devices.
2015-04-16 19:15:59 +01:00
plex = 193;
plexpy: add user id
2017-10-30 12:13:58 +00:00
plexpy = 195;
nixos: add grafana module
2015-04-25 15:02:44 +01:00
grafana = 196;
Add skydns module
2015-06-08 12:36:05 +01:00
skydns = 197;
ripple-rest: remove marked as broken for > 1 yr, development is frozen and author recommends moving to https://github.com/ripple/ripple-lib
2017-08-12 12:38:32 +01:00
# ripple-rest = 198; # unused, removed 2017-08-12
nixos/nix-serve: Run as a separate user and add a signing key parameter
2015-06-18 03:10:23 +01:00
nix-serve = 199;
tvheadend: init at 4.0.4
2015-06-20 21:33:57 +01:00
tvheadend = 200;
uwsgi-service: Add user/group for uwsgi service. Also add a uwsgi directory under /run (defaulting to /run/uwsgi) where the uwsgi user can place sockets.
2015-06-24 15:42:43 +01:00
uwsgi = 201;
nixos: added gitit service
2015-06-08 23:11:24 +01:00
gitit = 202;
Merge remote-tracking branch 'projectorhq/riemann-tools' Add riemann-tools package and service
2015-07-01 13:44:38 +01:00
riemanntools = 203;
subsonic service: init Add a systemd service and UID/GID for the Subsonic personal media streamer server (<http://subsonic.org>).
2015-07-04 01:42:16 +01:00
subsonic = 204;
riak: new nixos service
2015-07-21 11:16:18 +01:00
riak = 205;
shout service: New module.
2015-08-01 00:15:18 +01:00
shout = 206;
GateOne: init at 1.2
2015-07-31 05:22:44 +01:00
gateone = 207;
namecoind nixos module: init
2015-09-08 18:24:40 +01:00
namecoin = 208;
nixos/lxd: Add service
2015-09-14 07:27:31 +01:00
#lxd = 210; # unused
kibana service: init
2015-09-18 23:18:43 +01:00
kibana = 211;
xtreemfs: add nixos module
2015-09-13 13:49:19 +01:00
xtreemfs = 212;
calibre-server service: init
2015-09-28 04:31:17 +01:00
calibre-server = 213;
heapster module: init
2015-11-16 14:26:07 +00:00
heapster = 214;
services/misc/bepasty: init at 2015-10-21 This module implements a way to start one or more bepasty servers. It supports configuring the listen address of gunicorn and how bepasty behaves internally. Configuring multiple bepasty servers provides a way to serve pastes externally without authentication and provide creating,listing,deleting pastes interally. nginx can be used to provide access via hostname + listen address. `configuration.nix`: services.bepasty = { enable = true; servers = { internal = { defaultPermissions = "admin,list,create,read,delete"; secretKey = "secret"; bind = "127.0.0.1:8000"; }; external = { defaultPermissions = "read"; bind = "127.0.0.1:8001"; secretKey = "another-secret"; }; }; };
2015-10-21 13:45:27 +01:00
bepasty = 215;
nixos/pump.io: remove This would probably be better maintained in a separate repo as an external NixOS module which gets imported into user's configuration.
2018-02-24 08:44:27 +00:00
# pumpio = 216; # unused, removed 2018-02-24
networkmanager: set uid/gid for the networkmanager openvpn agent Fixes #11317
2015-12-08 16:46:57 +00:00
nm-openvpn = 217;
nixos/mathics: remove module
2020-08-15 15:19:17 +01:00
# mathics = 218; # unused, removed 2020-08-15
nixos/ejabberd: update service
2016-01-03 02:36:19 +00:00
ejabberd = 219;
nixos/postsrsd: add module
2016-01-06 03:04:50 +00:00
postsrsd = 220;
nixos/opendkim: add module
2016-01-06 22:10:56 +00:00
opendkim = 221;
nixos/dspam: add module
2016-01-07 01:17:42 +00:00
dspam = 222;
gale: init at 1.1happy
2015-08-03 18:04:10 +01:00
gale = 223;
matrix-synapse: init at 0.12.0
2016-01-08 14:12:00 +00:00
matrix-synapse = 224;
nixos: Add module for rspamd
2016-01-12 09:06:46 +00:00
rspamd = 225;
rmilter: remove deprecated package (and module)
2019-08-23 14:24:35 +01:00
# rmilter = 226; # unused, removed 2019-08-22
cfdyndns: init at 0.0.1
2016-01-17 12:11:09 +00:00
cfdyndns = 227;
Merge branch 'gammu-smsd' of https://github.com/zohl/nixpkgs into zohl-gammu-smsd Closes #12998
2016-02-16 16:40:00 +00:00
gammu-smsd = 228;
Merge branch 'pdnsd-service' of https://github.com/nfjinjing/nixpkgs Closes #12932
2016-02-16 17:35:01 +00:00
pdnsd = 229;
octoprint service: init
2016-02-14 11:58:09 +00:00
octoprint = 230;
networkmanager: fix link-local ip addresses NetworkManager needs an additional avahi-user to use link-local IPv4 (and probably IPv6) addresses. avahi-autoipd also needs to be patched to the right path.
2016-02-26 02:28:56 +00:00
avahi-autoipd = 231;
nntp-proxy service: init
2016-02-26 14:19:46 +00:00
nntp-proxy = 232;
mjpg-streamer service: init
2016-03-12 14:38:13 +00:00
mjpg-streamer = 233;
radicale service: run with dedicated user This is done in the context of #11908.
2016-03-20 14:25:02 +00:00
radicale = 234;
Pin hydra-www and hydra-queue-runner uids hydra user is already pinned, this is needed due to https://github.com/NixOS/nixpkgs/issues/14148 (cherry picked from commit 0858ece1ad0bd281d2332c40f9fd08005e04a3c5) Signed-off-by: Domen Kožar <domen@dev.si>
2016-03-23 12:14:31 +00:00
hydra-queue-runner = 235;
hydra-www = 236;
syncthing: run daemon with dedicated user as default
2016-04-01 00:26:52 +01:00
syncthing = 237;
caddy service: initial implementation
2016-04-05 02:30:21 +01:00
caddy = 239;
Merge pull request #14476 (taskserver) This adds a Taskserver module along with documentation and a small helper tool which eases managing a custom CA along with Taskserver organisations, users and groups. Taskserver is the server component of Taskwarrior, a TODO list application for the command line. The work has been started by @matthiasbeyer back in mid 2015 and I have continued to work on it recently, so this merge contains commits from both of us. Thanks particularly to @nbp and @matthiasbeyer for reviewing and suggesting improvements. I've tested this with the new test (nixos/tests/taskserver.nix) this branch adds and it fails because of the changes introduced by the closure-size branch, so we need to do additional work on base of this.
2016-04-14 23:09:23 +01:00
taskd = 240;
nixos/factorio: sandbox service using systemd - DynamicUser enabled instead of static uid/gid - Enables most sandboxing options systemd offers
2019-05-01 20:56:58 +01:00
# factorio = 241; # DynamicUser = true
emby: Drop package and module and refer to jellyfin
2019-05-01 12:19:30 +01:00
# emby = 242; # unusued, removed 2019-05-01
graylog service: Initial graylog service
2016-03-30 19:49:16 +01:00
graylog = 243;
sniproxy service: init
2016-05-11 05:18:38 +01:00
sniproxy = 244;
nzbget: 16.4 -> 17.0-r1686 and nzbget service
2016-05-04 09:58:01 +01:00
nzbget = 245;
mosquitto service: init Initial Mosquitto MQTT Broker service file.
2016-05-22 15:07:26 +01:00
mosquitto = 246;
toxvpn: init at 20151111 (Authored by @cleverca22)
2016-05-29 23:07:54 +01:00
toxvpn = 247;
nixos squeezelite: run using DynamicUser
2018-03-29 09:59:00 +01:00
# squeezelite = 248; # DynamicUser = true
coturn: init at 4.5.0.3 (#16284)
2016-06-21 11:59:29 +01:00
turnserver = 249;
smokeping: init at 2.6.11 (#17090) Includes a module for service setup and a test to verify functionality of both service and pkg.
2016-07-21 00:07:59 +01:00
smokeping = 250;
Add gocd agent and server service packages (#16273) GoCD is an open source continuous delivery server specializing in advanced workflow modeling and visualization. Update maintainers list to include swarren83. Update module list to include gocd agent and server module. Update packages list to include gocd agent and server package. Update version, revision and checksum for GoCD release 16.5.0.
2016-07-22 23:29:18 +01:00
gocd-agent = 251;
gocd-server = 252;
Add Terraria server service (#16832)
2016-08-07 02:58:38 +01:00
terraria = 253;
mattermost service: init
2016-08-15 02:17:53 +01:00
mattermost = 254;
prometheus service: add This is based on @benleys work: https://github.com/NixOS/nixpkgs/pull/8216 I updated changed the user and group ids.
2015-06-08 07:36:56 +01:00
prometheus = 255;
telegraf: init at 1.0.0 Signed-off-by: Jörg Thalheim <joerg@higgsboson.tk>
2016-09-08 14:30:20 +01:00
telegraf = 256;
gitlab-runner service: initial version
2016-09-17 12:08:18 +01:00
gitlab-runner = 257;
postgrey: init at 1.36 (includes service)
2015-11-17 17:30:10 +00:00
postgrey = 258;
hound: init module
2016-10-12 23:58:56 +01:00
hound = 259;
leaps: 0.5.1 + add a service + test
2016-11-06 09:33:21 +00:00
leaps = 260;
services: Add Interplanetary File System service Signed-off-by: Maximilian Güntner <code@klandest.in>
2016-10-30 19:39:53 +00:00
ipfs = 261;
stanchion: init at 2.1.1
2016-11-03 16:49:36 +00:00
stanchion = 262;
riak-cs: init at 2.1.1 riak-cs: added to all-packages Added Riak CS nix file to pkgs Added service file for Riak CS Removed Erlang_basho specific bindings from the Riak CS repo riak-cs: changed description riak-cs: added license riak-cs: added maintainer riak_cs: chgned indentations riak-cs: removed overly complex srcs mechanism riak-cs: added systemd module riak-cs: changed Erlang module to Basho-specific version riak-cs: made modular form riak-cs: Added a default package in service options riak-cs: Fixed default package in service options riak-cs: Patched Makefile riak_cs: added to module-list riak_cs: changed from string to actual package in modules riak-cs: changed example riak-cs: removed default riak-cs: changed to defaultText stanchion: changed default option to defaultText riak-cs: added defaults; changed types to str
2016-11-03 17:20:08 +00:00
riak-cs = 263;
infinoted service: init Service module for the dedicated gobby server included in libinfinity
2016-11-27 16:23:21 +00:00
infinoted = 264;
Add sickbeard module (with SickGear & SickRage)
2018-09-16 20:54:16 +01:00
sickbeard = 265;
headphones: init at 0.5.19
2018-09-16 20:47:47 +01:00
headphones = 266;
couchpotato module: init
2017-01-16 11:53:53 +00:00
couchpotato = 267;
gogs service: init
2016-10-09 18:04:42 +01:00
gogs = 268;
pdns-recursor: add service
2017-01-17 23:29:59 +00:00
pdns-recursor = 269;
Revert "Revert "Merge master into staging-next"" In 87a19e9048773d5a363679617406ad148d36c3b8 I merged staging-next into master using the GitHub gui as intended. In ac241fb7a570d6cf81d229ad22a8889602639160 I merged master into staging-next for the next staging cycle, however, I accidentally pushed it to master. Thinking this may cause trouble, I reverted it in 0be87c79797a5fa384fbc356c74ed54f9f7829ea. This was however wrong, as it "removed" master. This reverts commit 0be87c79797a5fa384fbc356c74ed54f9f7829ea.
2020-02-05 18:27:16 +00:00
#kresd = 270; # switched to "knot-resolver" with dynamic ID
rpcbind service: use upstream systemd unit
2017-01-29 17:06:17 +00:00
rpc = 271;
nixos/geoip-updater: run as user 'geoip' instead of 'nobody' That way 'nobody' is prevented from messing with the databases.
2017-02-13 21:26:21 +00:00
geoip = 272;
fcron: 3.1.2 -> 3.2.1 fixes #23320 #23413
2017-03-05 21:40:01 +00:00
fcron = 273;
nixos: static ids for jackett, radarr, sonarr
2017-04-22 08:44:12 +01:00
sonarr = 274;
radarr = 275;
jackett = 276;
Merge branch 'master' into aria2.service
2017-04-27 15:50:13 +01:00
aria2 = 277;
Merge branch 'master' into clickhouse
2017-05-01 06:33:31 +01:00
clickhouse = 278;
resilio service: replaces btsync service, which is no longer supported upstream.
2017-06-01 15:50:17 +01:00
rslsync = 279;
minio service: add inital service features: - change listen port and address - configure config and data directory - basic test to check if minio server starts
2017-06-25 17:43:10 +01:00
minio = 280;
Reserve uid/gids for kanboard
2017-10-09 12:44:32 +01:00
kanboard = 281;
nixos pykms: run via DynamicUser
2018-03-26 08:16:22 +01:00
# pykms = 282; # DynamicUser = true
nixos user: reserve kodi
2017-10-13 03:34:27 +01:00
kodi = 283;
ixos ids: reserve restya-board
2017-11-22 11:11:46 +00:00
restya-board = 284;
nixos/mighttpd2: init
2018-01-04 17:19:54 +00:00
mighttpd2 = 285;
home-assistant: add NixOS module
2018-01-23 09:51:13 +00:00
hass = 286;
nixos/monero: init
2018-02-05 21:02:14 +00:00
monero = 287;
nixos/ceph: init module (#35299) All 5 daemon types can be enabled and configured through the module and the module both creates the ceph.conf required but also creates and enables specific services for each daemon, based on the systemd service files that upstream provides.
2018-03-01 11:47:13 +00:00
ceph = 288;
duplicati: create service
2018-04-07 20:23:04 +01:00
duplicati = 289;
nixos/monetdb: init (#39812)
2018-05-01 15:44:12 +01:00
monetdb = 290;
restic-rest-server module: init
2018-05-03 20:30:06 +01:00
restic = 291;
ids: assing openvpn
2018-05-26 04:11:48 +01:00
openvpn = 292;
meguca: init at git-2018-05-17
2018-05-18 00:56:58 +01:00
meguca = 293;
nixos/hadoop: add hadoop module (hdfs, yarn)
2018-05-21 02:09:31 +01:00
yarn = 294;
hdfs = 295;
mapred = 296;
hadoop = 297;
nixos/hydron: init
2018-07-11 00:10:02 +01:00
hydron = 298;
nixos/cfssl: init - based on module originally written by @srhb - complies with available options in cfssl v1.3.2 - uid and gid 299 reserved in ids.nix - added simple nixos test case
2018-07-26 15:25:34 +01:00
cfssl = 299;
cassandra: rewrote service from scratch Adds a replacement for the previously broken `services.database.cassandra` with tests for a multi-node setup.
2017-11-07 13:11:56 +00:00
cassandra = 300;
nixos/libvirtd: add option to run qemu as non-root New option virtualisation.libvirtd.qemuRunAsRoot (default: true). If false, qemu is run as non-privileged user qemu-libvirtd, reducing security risk
2018-03-17 23:22:53 +00:00
qemu-libvirtd = 301;
systemd: added groups kvm, render they need to exist according to the README of systemd
2018-08-15 21:10:31 +01:00
# kvm = 302; # unused
# render = 303; # unused
nixos/zeronet: remove static uid and gid
2019-10-03 07:25:08 +01:00
# zeronet = 304; # removed 2019-01-03
initial NixOS module for LIRC
2017-11-25 21:41:19 +00:00
lirc = 305;
lidarr: init at 0.3.1.471 Fork of sonarr (as radarr) but for music instead of series and movies.
2018-09-09 11:10:04 +01:00
lidarr = 306;
nixos/slurm: run ctld as user and fix spool dir * run as user 'slurm' per default instead of root * add user/group slurm to ids.nix * fix default location for the state dir of slurmctld: (/var/spool -> /var/spool/slurmctld) * Update release notes with the above changes
2018-10-23 22:43:53 +01:00
slurm = 307;
nixos/kapacitor: new service
2018-11-01 20:52:17 +00:00
kapacitor = 308;
solr: 4.10.3 -> 7.5.0, refactor service to reflect major changes in version bump, NixOS test included
2018-11-03 17:14:13 +00:00
solr = 309;
nixos/alerta: create new module + add kapacitor integration
2018-11-08 21:34:23 +00:00
alerta = 310;
nixos/minetest fix: add missing uid/gid for minetest
2018-11-11 11:41:27 +00:00
minetest = 311;
rss2email module: init Also adding `system-sendmail` package for sharing the code with other modules or packages needing it.
2018-10-27 10:33:43 +01:00
rss2email = 312;
nixos/cockroachdb: create new service This also includes a full end-to-end CockroachDB clustering test to ensure everything basically works. However, this test is not currently enabled by default, though it can be run manually. See the included comments in the test for more information. Closes #51306. Closes #38665. Co-authored-by: Austin Seipp <aseipp@pobox.com> Signed-off-by: Austin Seipp <aseipp@pobox.com>
2018-04-10 02:16:33 +01:00
cockroachdb = 313;
zoneminder: add user for NixOS
2019-01-09 02:58:32 +00:00
zoneminder = 314;
paperless service: init
2019-01-27 14:26:31 +00:00
paperless = 315;
nixos/mailman: don't reserve a static uid in the system Any system uid will do, so we let the system allocate one for us. The 'mailman' group is gone entirely since we don't need it. Users who wish to run the 'mailman' administration utility can do so via 'sudo': $ sudo -u mailman mailman info Also, simplify the syntax of our user.users entry to rely on an attribute set rather than a list.
2019-08-30 16:55:59 +01:00
#mailman = 316; # removed 2019-08-30
nixos/zigbee2mqtt: init
2019-10-27 17:28:53 +00:00
zigbee2mqtt = 317;
panamax: new package and service
2014-12-08 09:02:57 +00:00
Allocate system uids/gids between 400 and 500 Previously it was between 100 and 500, but this can already collide with the static uids/guid in misc/ids.nix.
2014-04-29 09:45:06 +01:00
# When adding a uid, make sure it doesn't match an existing gid. And don't use uids above 399!
Add support for the Avahi daemon. The daemon starts correctly but, for some reason, clients fail to connect to it. svn path=/nixos/trunk/; revision=10999
2008-03-06 17:11:22 +00:00
Update all legacy-style modules I.e., modules that use "require = [options]". Nowadays that should be written as { options = { ... }; config = { ... }; }; Also, use "imports" instead of "require" in places where we actually import another module.
2013-09-04 12:05:09 +01:00
nixbld = 30000; # start of range of uids
nobody = 65534;
};
ids.gids = {
root = 0;
wheel = 1;
kmem = 2;
tty = 3;
messagebus = 4; # D-Bus
haldaemon = 5;
disk = 6;
vsftpd = 7;
ftp = 8;
bitlbee = 9;
nixos/ids: remove avahi uid/gid
2019-05-22 21:01:55 +01:00
#avahi = 10; # removed 2019-05-22
nixos: resolve uid/gid conflicts This patch resolves all uid/gid conflicts except for nobody/nogroup (seems to make sense that these are the same). All conflicts where determined mechanically, but resolutions were manual. This patch also marks uids/gids with no corresponding group/user as "unused" (aka. reserved). Briefly, - tss group conflicts with dhcpcd The tss group id conflicts with dhcpcd: assign a new number and add a corresponding tss user. - elasticsearch uid conflicts with haproxy gid - resolve firebird/munin conflict - fix fourstorehttp{,d} typo - fix ghostOne typo: the service module refers to gids.ghostone, so use that in ids - memcached uid conflicts with users gid - nagios uid conflicts with disks gid - nscd uid conflicts with wheel gid - ntp uid conflicts with tty gid - resolve postfix/postdrop id uid - redis uid conflicts with keys gid - sshd uid conflicts with kmem gid - tcryptd uid conflicts with openldap gid - unifi uid conflicts with docker gid - uptimed uid conflicts with utmp gid - zope2 uid conflicts with connman gid - tomcat uid/gid mismatch
2015-03-08 20:35:04 +00:00
#nagios = 11; # unused
Update all legacy-style modules I.e., modules that use "require = [options]". Nowadays that should be written as { options = { ... }; config = { ... }; }; Also, use "imports" instead of "require" in places where we actually import another module.
2013-09-04 12:05:09 +01:00
atd = 12;
postfix = 13;
postdrop = 14;
dovecot = 15;
nixos: resolve uid/gid conflicts This patch resolves all uid/gid conflicts except for nobody/nogroup (seems to make sense that these are the same). All conflicts where determined mechanically, but resolutions were manual. This patch also marks uids/gids with no corresponding group/user as "unused" (aka. reserved). Briefly, - tss group conflicts with dhcpcd The tss group id conflicts with dhcpcd: assign a new number and add a corresponding tss user. - elasticsearch uid conflicts with haproxy gid - resolve firebird/munin conflict - fix fourstorehttp{,d} typo - fix ghostOne typo: the service module refers to gids.ghostone, so use that in ids - memcached uid conflicts with users gid - nagios uid conflicts with disks gid - nscd uid conflicts with wheel gid - ntp uid conflicts with tty gid - resolve postfix/postdrop id uid - redis uid conflicts with keys gid - sshd uid conflicts with kmem gid - tcryptd uid conflicts with openldap gid - unifi uid conflicts with docker gid - uptimed uid conflicts with utmp gid - zope2 uid conflicts with connman gid - tomcat uid/gid mismatch
2015-03-08 20:35:04 +00:00
tomcat = 16;
Update all legacy-style modules I.e., modules that use "require = [options]". Nowadays that should be written as { options = { ... }; config = { ... }; }; Also, use "imports" instead of "require" in places where we actually import another module.
2013-09-04 12:05:09 +01:00
audio = 17;
floppy = 18;
uucp = 19;
lp = 20;
nixos: add optional process information hiding This module adds an option `security.hideProcessInformation` that, when enabled, restricts access to process information such as command-line arguments to the process owner. The module adds a static group "proc" whose members are exempt from process information hiding. Ideally, this feature would be implemented by simply adding the appropriate mount options to `fileSystems."/proc".fsOptions`, but this was found to not work in vmtests. To ensure that process information hiding is enforced, we use a systemd service unit that remounts `/proc` after `systemd-remount-fs.service` has completed. To verify the correctness of the feature, simple tests were added to nixos/tests/misc: the test ensures that unprivileged users cannot see process information owned by another user, while members of "proc" CAN. Thanks to @abbradar for feedback and suggestions.
2016-04-09 19:22:16 +01:00
proc = 21;
Update all legacy-style modules I.e., modules that use "require = [options]". Nowadays that should be written as { options = { ... }; config = { ... }; }; Also, use "imports" instead of "require" in places where we actually import another module.
2013-09-04 12:05:09 +01:00
pulseaudio = 22; # must match `pulseaudio' UID
gpsd = 23;
cdrom = 24;
tape = 25;
video = 26;
dialout = 27;
polkit: major update 0.105 -> 0.112 - It now uses JavaScript for configuration (only), so I had to "convert" config for NetworkManager. - I tested suspend/restart/(un)mount on KDE/Xfce, Phreedom tested NetworkManager config conversion.
2013-11-09 15:29:18 +00:00
#polkituser = 28; # currently unused, polkitd doesn't need a group
Update all legacy-style modules I.e., modules that use "require = [options]". Nowadays that should be written as { options = { ... }; config = { ... }; }; Also, use "imports" instead of "require" in places where we actually import another module.
2013-09-04 12:05:09 +01:00
utmp = 29;
nixos ddclient: support multiple domains and run via systemd timer a) Some providers can update multiple domains - support that. b) Make "zone" and "script" configurable. Some providers require these. c) Instead of leaving the ddclient daemon running all the time, use a systemd timer to kick it off. d) Don't use a predefined user - run everything via DynamicUser e) Add documentation
2018-03-12 15:25:28 +00:00
# ddclient = 30; # converted to DynamicUser = true
Update all legacy-style modules I.e., modules that use "require = [options]". Nowadays that should be written as { options = { ... }; config = { ... }; }; Also, use "imports" instead of "require" in places where we actually import another module.
2013-09-04 12:05:09 +01:00
davfs2 = 31;
disnix = 33;
osgi = 34;
nixos: overhaul Tor module This overhauls the Tor module in a few ways: - Uses systemd service files, including hardening/config checks - Removed old privoxy support; users should use the Tor Browser instead. - Remove 'fast' circuit/SOCKS port; most users don't care (and it adds added complexity and confusion) - Added support for bandwidth accounting - Removed old relay listenAddress option; taken over by portSpec - Formatting, description, code cleanups. Signed-off-by: Austin Seipp <aseipp@pobox.com>
2014-12-06 09:37:31 +00:00
tor = 35;
nixos: resolve uid/gid conflicts This patch resolves all uid/gid conflicts except for nobody/nogroup (seems to make sense that these are the same). All conflicts where determined mechanically, but resolutions were manual. This patch also marks uids/gids with no corresponding group/user as "unused" (aka. reserved). Briefly, - tss group conflicts with dhcpcd The tss group id conflicts with dhcpcd: assign a new number and add a corresponding tss user. - elasticsearch uid conflicts with haproxy gid - resolve firebird/munin conflict - fix fourstorehttp{,d} typo - fix ghostOne typo: the service module refers to gids.ghostone, so use that in ids - memcached uid conflicts with users gid - nagios uid conflicts with disks gid - nscd uid conflicts with wheel gid - ntp uid conflicts with tty gid - resolve postfix/postdrop id uid - redis uid conflicts with keys gid - sshd uid conflicts with kmem gid - tcryptd uid conflicts with openldap gid - unifi uid conflicts with docker gid - uptimed uid conflicts with utmp gid - zope2 uid conflicts with connman gid - tomcat uid/gid mismatch
2015-03-08 20:35:04 +00:00
#cups = 36; # unused
#foldingathome = 37; # unused
#sabnzd = 38; # unused
kdm: drop service
2017-02-11 18:55:09 +00:00
#kdm = 39; # unused, even before 17.03
ghostOne: remove broken and unmaintained
2017-12-27 14:28:11 +00:00
#ghostone = 40; # dropped in 18.03
Update all legacy-style modules I.e., modules that use "require = [options]". Nowadays that should be written as { options = { ... }; config = { ... }; }; Also, use "imports" instead of "require" in places where we actually import another module.
2013-09-04 12:05:09 +01:00
git = 41;
Fix some uid/gid attributes to match the actual user/group name
2014-04-29 09:51:42 +01:00
fourstore = 42;
nixos: resolve uid/gid conflicts This patch resolves all uid/gid conflicts except for nobody/nogroup (seems to make sense that these are the same). All conflicts where determined mechanically, but resolutions were manual. This patch also marks uids/gids with no corresponding group/user as "unused" (aka. reserved). Briefly, - tss group conflicts with dhcpcd The tss group id conflicts with dhcpcd: assign a new number and add a corresponding tss user. - elasticsearch uid conflicts with haproxy gid - resolve firebird/munin conflict - fix fourstorehttp{,d} typo - fix ghostOne typo: the service module refers to gids.ghostone, so use that in ids - memcached uid conflicts with users gid - nagios uid conflicts with disks gid - nscd uid conflicts with wheel gid - ntp uid conflicts with tty gid - resolve postfix/postdrop id uid - redis uid conflicts with keys gid - sshd uid conflicts with kmem gid - tcryptd uid conflicts with openldap gid - unifi uid conflicts with docker gid - uptimed uid conflicts with utmp gid - zope2 uid conflicts with connman gid - tomcat uid/gid mismatch
2015-03-08 20:35:04 +00:00
fourstorehttp = 43;
Update all legacy-style modules I.e., modules that use "require = [options]". Nowadays that should be written as { options = { ... }; config = { ... }; }; Also, use "imports" instead of "require" in places where we actually import another module.
2013-09-04 12:05:09 +01:00
virtuoso = 44;
nixos: resolve uid/gid conflicts This patch resolves all uid/gid conflicts except for nobody/nogroup (seems to make sense that these are the same). All conflicts where determined mechanically, but resolutions were manual. This patch also marks uids/gids with no corresponding group/user as "unused" (aka. reserved). Briefly, - tss group conflicts with dhcpcd The tss group id conflicts with dhcpcd: assign a new number and add a corresponding tss user. - elasticsearch uid conflicts with haproxy gid - resolve firebird/munin conflict - fix fourstorehttp{,d} typo - fix ghostOne typo: the service module refers to gids.ghostone, so use that in ids - memcached uid conflicts with users gid - nagios uid conflicts with disks gid - nscd uid conflicts with wheel gid - ntp uid conflicts with tty gid - resolve postfix/postdrop id uid - redis uid conflicts with keys gid - sshd uid conflicts with kmem gid - tcryptd uid conflicts with openldap gid - unifi uid conflicts with docker gid - uptimed uid conflicts with utmp gid - zope2 uid conflicts with connman gid - tomcat uid/gid mismatch
2015-03-08 20:35:04 +00:00
#rtkit = 45; # unused
Update all legacy-style modules I.e., modules that use "require = [options]". Nowadays that should be written as { options = { ... }; config = { ... }; }; Also, use "imports" instead of "require" in places where we actually import another module.
2013-09-04 12:05:09 +01:00
dovecot2 = 46;
dovecot: dovenull user should have its own group. Quoting from https://wiki.dovecot.org/UserIds#dovenulluser: "It should belong to its own private dovenull group where no one else belongs to..."
2018-10-22 18:57:32 +01:00
dovenull2 = 47;
Update all legacy-style modules I.e., modules that use "require = [options]". Nowadays that should be written as { options = { ... }; config = { ... }; }; Also, use "imports" instead of "require" in places where we actually import another module.
2013-09-04 12:05:09 +01:00
prayer = 49;
mpd = 50;
clamav = 51;
fprot = 52;
nixos: resolve uid/gid conflicts This patch resolves all uid/gid conflicts except for nobody/nogroup (seems to make sense that these are the same). All conflicts where determined mechanically, but resolutions were manual. This patch also marks uids/gids with no corresponding group/user as "unused" (aka. reserved). Briefly, - tss group conflicts with dhcpcd The tss group id conflicts with dhcpcd: assign a new number and add a corresponding tss user. - elasticsearch uid conflicts with haproxy gid - resolve firebird/munin conflict - fix fourstorehttp{,d} typo - fix ghostOne typo: the service module refers to gids.ghostone, so use that in ids - memcached uid conflicts with users gid - nagios uid conflicts with disks gid - nscd uid conflicts with wheel gid - ntp uid conflicts with tty gid - resolve postfix/postdrop id uid - redis uid conflicts with keys gid - sshd uid conflicts with kmem gid - tcryptd uid conflicts with openldap gid - unifi uid conflicts with docker gid - uptimed uid conflicts with utmp gid - zope2 uid conflicts with connman gid - tomcat uid/gid mismatch
2015-03-08 20:35:04 +00:00
#bind = 53; # unused
Update all legacy-style modules I.e., modules that use "require = [options]". Nowadays that should be written as { options = { ... }; config = { ... }; }; Also, use "imports" instead of "require" in places where we actually import another module.
2013-09-04 12:05:09 +01:00
wwwrun = 54;
adm = 55;
spamd = 56;
networkmanager = 57;
nslcd = 58;
scanner = 59;
nginx = 60;
chrony service: Members of group chrony can use chronyc
2015-07-12 06:13:04 +01:00
chrony = 61;
Update all legacy-style modules I.e., modules that use "require = [options]". Nowadays that should be written as { options = { ... }; config = { ... }; }; Also, use "imports" instead of "require" in places where we actually import another module.
2013-09-04 12:05:09 +01:00
systemd-journal = 62;
smtpd = 63;
smtpq = 64;
supybot = 65;
iodined = 66;
libvirtd = 67;
graphite = 68;
nodePackages.statsd: remove The package/service is broken. Upstream is dead
2018-11-14 18:27:09 +00:00
#statsd = 69; # removed 2018-11-14
Update all legacy-style modules I.e., modules that use "require = [options]". Nowadays that should be written as { options = { ... }; config = { ... }; }; Also, use "imports" instead of "require" in places where we actually import another module.
2013-09-04 12:05:09 +01:00
transmission = 70;
postgres = 71;
vboxusers = 72;
vboxsf = 73;
nixos/samba: remove services.samba.defaultShare option It's not that difficult to define shares using standard samba config file syntax, so why do we need the semi-configurable .defaultShare option? Also: * It uses /home/smbd and I think /home should be reserved for real human users. * If enabled, it breaks the assumption that .extraConfig continues in the [global] section. Without .defaultShare there is no need for the "smbguest" user and group either, mark them as unused.
2014-09-05 23:45:47 +01:00
smbguest = 74; # unused
Update all legacy-style modules I.e., modules that use "require = [options]". Nowadays that should be written as { options = { ... }; config = { ... }; }; Also, use "imports" instead of "require" in places where we actually import another module.
2013-09-04 12:05:09 +01:00
varnish = 75;
nixos: overhaul datadog module This overhauls the Datadog module a bit to be much more useful. In particular, it adds support for nginx and postgresql monitoring integrations to dd-agent. These have to exist in separate files under /etc/dd-agent, so the module just exposes then as separate options. In the future, more integrations could be added this way. In the process of doing this, I also had to rename the dd-agent user to datadog. Note the UIDs did not change, so this is strictly backwards compatible. The reason for this is to make it easier to create a 'datadog' postgres user with access to pg_stats, as 'dd-agent' typically isn't a valid username. This allows the out of the box configurations to be used. Signed-off-by: Austin Seipp <aseipp@pobox.com>
2014-05-02 06:43:27 +01:00
datadog = 76;
Update all legacy-style modules I.e., modules that use "require = [options]". Nowadays that should be written as { options = { ... }; config = { ... }; }; Also, use "imports" instead of "require" in places where we actually import another module.
2013-09-04 12:05:09 +01:00
lighttpd = 77;
lightdm = 78;
freenet = 79;
ircd = 80;
bacula = 81;
almir: also remove the corresponding module. The almir package was removed in 30291227f2411abaca097773eedb49b8f259e297 at about 2017-08 This module can no more be used without it.
2018-03-25 20:39:02 +01:00
#almir = 82; # removed 2018-03-25, the almir package was removed in 30291227f2411abaca097773eedb49b8f259e297 during 2017-08
Update all legacy-style modules I.e., modules that use "require = [options]". Nowadays that should be written as { options = { ... }; config = { ... }; }; Also, use "imports" instead of "require" in places where we actually import another module.
2013-09-04 12:05:09 +01:00
deluge = 83;
mysql = 84;
rabbitmq = 85;
activemq = 86;
gnunet = 87;
oidentd = 88;
quassel = 89;
amule = 90;
minidlna = 91;
nixos/elasticsearch: Set a group on the user This fixed a problem I had when running ElasticSearch in an LXC container, and it doesn't hurt using a dedicated group instead of nogroup anyway.
2016-07-01 17:01:52 +01:00
elasticsearch = 92;
nixos: resolve uid/gid conflicts This patch resolves all uid/gid conflicts except for nobody/nogroup (seems to make sense that these are the same). All conflicts where determined mechanically, but resolutions were manual. This patch also marks uids/gids with no corresponding group/user as "unused" (aka. reserved). Briefly, - tss group conflicts with dhcpcd The tss group id conflicts with dhcpcd: assign a new number and add a corresponding tss user. - elasticsearch uid conflicts with haproxy gid - resolve firebird/munin conflict - fix fourstorehttp{,d} typo - fix ghostOne typo: the service module refers to gids.ghostone, so use that in ids - memcached uid conflicts with users gid - nagios uid conflicts with disks gid - nscd uid conflicts with wheel gid - ntp uid conflicts with tty gid - resolve postfix/postdrop id uid - redis uid conflicts with keys gid - sshd uid conflicts with kmem gid - tcryptd uid conflicts with openldap gid - unifi uid conflicts with docker gid - uptimed uid conflicts with utmp gid - zope2 uid conflicts with connman gid - tomcat uid/gid mismatch
2015-03-08 20:35:04 +00:00
#tcpcryptd = 93; # unused
firebird = 95;
Add a keys group with read access to /run/keys This allows processes running as unprivileged users access to keys they might need
2014-02-11 12:00:10 +00:00
keys = 96;
nixos/haproxy: Revive the haproxy user and group Running haproxy with "DynamicUser = true" doesn't really work, since it prohibits specifying a TLS certificate bundle with limited permissions. This revives the haproxy user and group, but makes them dynamically allocated by NixOS, rather than statically allocated. It also adds options to specify which user and group haproxy runs as.
2020-03-11 18:52:37 +00:00
#haproxy = 97; # dynamically allocated as of 2020-03-11
nixos: resolve uid/gid conflicts This patch resolves all uid/gid conflicts except for nobody/nogroup (seems to make sense that these are the same). All conflicts where determined mechanically, but resolutions were manual. This patch also marks uids/gids with no corresponding group/user as "unused" (aka. reserved). Briefly, - tss group conflicts with dhcpcd The tss group id conflicts with dhcpcd: assign a new number and add a corresponding tss user. - elasticsearch uid conflicts with haproxy gid - resolve firebird/munin conflict - fix fourstorehttp{,d} typo - fix ghostOne typo: the service module refers to gids.ghostone, so use that in ids - memcached uid conflicts with users gid - nagios uid conflicts with disks gid - nscd uid conflicts with wheel gid - ntp uid conflicts with tty gid - resolve postfix/postdrop id uid - redis uid conflicts with keys gid - sshd uid conflicts with kmem gid - tcryptd uid conflicts with openldap gid - unifi uid conflicts with docker gid - uptimed uid conflicts with utmp gid - zope2 uid conflicts with connman gid - tomcat uid/gid mismatch
2015-03-08 20:35:04 +00:00
#mongodb = 98; # unused
openldap = 99;
munin = 102;
#logcheck = 103; # unused
#nix-ssh = 104; # unused
nixos: Assign uid/gid to dictd's service user.
2014-02-21 11:40:05 +00:00
dictd = 105;
couchdb: add ids
2014-02-27 13:33:30 +00:00
couchdb = 106;
searx: add module
2014-03-07 19:09:59 +00:00
searx = 107;
UID/GID fix for kippo
2014-03-12 07:32:56 +00:00
kippo = 108;
Add jenkins continuous integration server and user. By default the jenkins server is executed under the user "jenkins". Which can be configured using users.jenkins.* options. If a different user is requested by changing services.jenkins.user then none of the users.jenkins options apply. This patch does not include jenkins slave configuration. Some config options will probably change when this is implemented. Aspects like the user and environment are typically identical between slave and master. The service configs are different. The design is for users.jenkins to cover the shared aspects while services.jenkins and services.jenkins-slave cover the master and slave specific aspects, respectively. Another option would be to place everything under services.jenkins and have a config that selects master vs slave.
2014-02-10 20:07:12 +00:00
jenkins = 109;
Merge branch 'pkgs/systemd/journald_http_gateway' of git://github.com/offlinehacker/nixpkgs systemd: python support & journal http gateway Conflicts: nixos/modules/misc/ids.nix
2014-03-14 23:16:59 +00:00
systemd-journal-gateway = 110;
notbit: removed dead package The Bitmessage protocol v3 became mandatory on 16 Nov 2014 and notbit does not support it, nor has there been any activity in the project repository since then.
2016-01-07 03:34:31 +00:00
#notbit = 111; # unused
aerospike: init at 4.2.0.4 Co-authored-by: Volth <volth@webmaster.ms>
2018-07-16 01:40:53 +01:00
aerospike = 111;
nixos: resolve uid/gid conflicts This patch resolves all uid/gid conflicts except for nobody/nogroup (seems to make sense that these are the same). All conflicts where determined mechanically, but resolutions were manual. This patch also marks uids/gids with no corresponding group/user as "unused" (aka. reserved). Briefly, - tss group conflicts with dhcpcd The tss group id conflicts with dhcpcd: assign a new number and add a corresponding tss user. - elasticsearch uid conflicts with haproxy gid - resolve firebird/munin conflict - fix fourstorehttp{,d} typo - fix ghostOne typo: the service module refers to gids.ghostone, so use that in ids - memcached uid conflicts with users gid - nagios uid conflicts with disks gid - nscd uid conflicts with wheel gid - ntp uid conflicts with tty gid - resolve postfix/postdrop id uid - redis uid conflicts with keys gid - sshd uid conflicts with kmem gid - tcryptd uid conflicts with openldap gid - unifi uid conflicts with docker gid - uptimed uid conflicts with utmp gid - zope2 uid conflicts with connman gid - tomcat uid/gid mismatch
2015-03-08 20:35:04 +00:00
#ngircd = 112; # unused
nixos/btsync: remove Remove the btsync module. Bittorrent Sync was renamed to Resilio Sync in 2016, which is supported by the resilio module. Since Resilio Sync had some security updates since 2016, it is not safe to run Bittorrent Sync anymore.
2019-06-02 19:18:15 +01:00
#btsync = 113; # unused
nixos: resolve uid/gid conflicts This patch resolves all uid/gid conflicts except for nobody/nogroup (seems to make sense that these are the same). All conflicts where determined mechanically, but resolutions were manual. This patch also marks uids/gids with no corresponding group/user as "unused" (aka. reserved). Briefly, - tss group conflicts with dhcpcd The tss group id conflicts with dhcpcd: assign a new number and add a corresponding tss user. - elasticsearch uid conflicts with haproxy gid - resolve firebird/munin conflict - fix fourstorehttp{,d} typo - fix ghostOne typo: the service module refers to gids.ghostone, so use that in ids - memcached uid conflicts with users gid - nagios uid conflicts with disks gid - nscd uid conflicts with wheel gid - ntp uid conflicts with tty gid - resolve postfix/postdrop id uid - redis uid conflicts with keys gid - sshd uid conflicts with kmem gid - tcryptd uid conflicts with openldap gid - unifi uid conflicts with docker gid - uptimed uid conflicts with utmp gid - zope2 uid conflicts with connman gid - tomcat uid/gid mismatch
2015-03-08 20:35:04 +00:00
#minecraft = 114; # unused
vault: run as an unpivileged user
2017-06-27 15:54:25 +01:00
vault = 115;
nixos: resolve uid/gid conflicts This patch resolves all uid/gid conflicts except for nobody/nogroup (seems to make sense that these are the same). All conflicts where determined mechanically, but resolutions were manual. This patch also marks uids/gids with no corresponding group/user as "unused" (aka. reserved). Briefly, - tss group conflicts with dhcpcd The tss group id conflicts with dhcpcd: assign a new number and add a corresponding tss user. - elasticsearch uid conflicts with haproxy gid - resolve firebird/munin conflict - fix fourstorehttp{,d} typo - fix ghostOne typo: the service module refers to gids.ghostone, so use that in ids - memcached uid conflicts with users gid - nagios uid conflicts with disks gid - nscd uid conflicts with wheel gid - ntp uid conflicts with tty gid - resolve postfix/postdrop id uid - redis uid conflicts with keys gid - sshd uid conflicts with kmem gid - tcryptd uid conflicts with openldap gid - unifi uid conflicts with docker gid - uptimed uid conflicts with utmp gid - zope2 uid conflicts with connman gid - tomcat uid/gid mismatch
2015-03-08 20:35:04 +00:00
#ripped = 116; # unused
#murmur = 117; # unused
nixos: reserve some uids/gids I have some NixOS modules that I keep out of tree, and having UIDs/GIDs reserved is quite helpful. Signed-off-by: Austin Seipp <aseipp@pobox.com>
2014-04-02 17:01:25 +01:00
foundationdb = 118;
newrelic = 119;
starbound = 120;
Fix hydra UID The style for IDs dictates that groups/users should have the same ID - so if a user doesn't have a group or vice versa, then we should skip that ID. In this case, we had already assigned grsecurity GID 121, but I accidentally also assigned Hydra UID 121. Instead, let's assign Hydra UID 122. And also assign a GID (122) as well. Luckily nobody was depending on this yet (except me). Signed-off-by: Austin Seipp <aseipp@pobox.com>
2014-04-15 08:28:01 +01:00
hydra = 122;
nixos: add spiped service module Signed-off-by: Austin Seipp <aseipp@pobox.com>
2014-04-15 09:21:53 +01:00
spiped = 123;
Add TeamSpeak 3 server & service module (close #2056) Conflicts (trivial): lib/maintainers.nix nixos/modules/misc/ids.nix
2014-03-29 00:40:30 +00:00
teamspeak = 124;
nixos: add influxdb module
2014-05-27 21:54:43 +01:00
influxdb = 125;
nsd-service: add service module for nsd
2014-06-12 10:20:43 +01:00
nsd = 126;
nixos/gitolite: use group 'gitolite' instead of 'nogroup' Having files (git repositories) owned by 'nogroup' is a bad idea.
2017-09-12 10:31:29 +01:00
gitolite = 127;
Merge remote-tracking branch 'nixos/master' into feature/add-znc-module Conflicts: nixos/modules/misc/ids.nix
2014-07-03 17:30:11 +01:00
znc = 128;
polipo: new service expression
2014-07-15 15:16:58 +01:00
polipo = 129;
Add NixOS module for Mopidy, a music player daemon
2014-07-28 18:52:32 +01:00
mopidy = 130;
Upgrade docker to 1.1.2 and add docker module This version of module has disabled socketActivation, because until nixos upgrade systemd to at least 214, systemd does not support SocketGroup. So socket is created with "root" group when socketActivation enabled. Should be fixed as soon as systemd upgraded. Includes changes from #3015 and supersedes #3028
2014-07-27 23:00:59 +01:00
docker = 131;
gdm: Add very experimental display manager
2014-04-02 17:21:00 +01:00
gdm = 132;
nixos: resolve uid/gid conflicts This patch resolves all uid/gid conflicts except for nobody/nogroup (seems to make sense that these are the same). All conflicts where determined mechanically, but resolutions were manual. This patch also marks uids/gids with no corresponding group/user as "unused" (aka. reserved). Briefly, - tss group conflicts with dhcpcd The tss group id conflicts with dhcpcd: assign a new number and add a corresponding tss user. - elasticsearch uid conflicts with haproxy gid - resolve firebird/munin conflict - fix fourstorehttp{,d} typo - fix ghostOne typo: the service module refers to gids.ghostone, so use that in ids - memcached uid conflicts with users gid - nagios uid conflicts with disks gid - nscd uid conflicts with wheel gid - ntp uid conflicts with tty gid - resolve postfix/postdrop id uid - redis uid conflicts with keys gid - sshd uid conflicts with kmem gid - tcryptd uid conflicts with openldap gid - unifi uid conflicts with docker gid - uptimed uid conflicts with utmp gid - zope2 uid conflicts with connman gid - tomcat uid/gid mismatch
2015-03-08 20:35:04 +00:00
#dhcpcd = 133; # unused
siproxd: initial service expression
2014-07-10 19:08:38 +01:00
siproxd = 134;
Add mlmmj package and nixos module.
2014-07-08 23:43:26 +01:00
mlmmj = 135;
nixos: resolve uid/gid conflicts This patch resolves all uid/gid conflicts except for nobody/nogroup (seems to make sense that these are the same). All conflicts where determined mechanically, but resolutions were manual. This patch also marks uids/gids with no corresponding group/user as "unused" (aka. reserved). Briefly, - tss group conflicts with dhcpcd The tss group id conflicts with dhcpcd: assign a new number and add a corresponding tss user. - elasticsearch uid conflicts with haproxy gid - resolve firebird/munin conflict - fix fourstorehttp{,d} typo - fix ghostOne typo: the service module refers to gids.ghostone, so use that in ids - memcached uid conflicts with users gid - nagios uid conflicts with disks gid - nscd uid conflicts with wheel gid - ntp uid conflicts with tty gid - resolve postfix/postdrop id uid - redis uid conflicts with keys gid - sshd uid conflicts with kmem gid - tcryptd uid conflicts with openldap gid - unifi uid conflicts with docker gid - uptimed uid conflicts with utmp gid - zope2 uid conflicts with connman gid - tomcat uid/gid mismatch
2015-03-08 20:35:04 +00:00
#neo4j = 136; # unused
Add NixOS module for Riemann monitoring server.
2014-08-23 16:04:34 +01:00
riemann = 137;
Add NixOS module for the Riemann dashboard server
2014-08-23 16:39:45 +01:00
riemanndash = 138;
nixos: resolve uid/gid conflicts This patch resolves all uid/gid conflicts except for nobody/nogroup (seems to make sense that these are the same). All conflicts where determined mechanically, but resolutions were manual. This patch also marks uids/gids with no corresponding group/user as "unused" (aka. reserved). Briefly, - tss group conflicts with dhcpcd The tss group id conflicts with dhcpcd: assign a new number and add a corresponding tss user. - elasticsearch uid conflicts with haproxy gid - resolve firebird/munin conflict - fix fourstorehttp{,d} typo - fix ghostOne typo: the service module refers to gids.ghostone, so use that in ids - memcached uid conflicts with users gid - nagios uid conflicts with disks gid - nscd uid conflicts with wheel gid - ntp uid conflicts with tty gid - resolve postfix/postdrop id uid - redis uid conflicts with keys gid - sshd uid conflicts with kmem gid - tcryptd uid conflicts with openldap gid - unifi uid conflicts with docker gid - uptimed uid conflicts with utmp gid - zope2 uid conflicts with connman gid - tomcat uid/gid mismatch
2015-03-08 20:35:04 +00:00
#radvd = 139; # unused
#zookeeper = 140; # unused
#dnsmasq = 141; # unused
Add IDs for uhub service
2014-09-01 07:53:00 +01:00
uhub = 142;
nixos: resolve uid/gid conflicts This patch resolves all uid/gid conflicts except for nobody/nogroup (seems to make sense that these are the same). All conflicts where determined mechanically, but resolutions were manual. This patch also marks uids/gids with no corresponding group/user as "unused" (aka. reserved). Briefly, - tss group conflicts with dhcpcd The tss group id conflicts with dhcpcd: assign a new number and add a corresponding tss user. - elasticsearch uid conflicts with haproxy gid - resolve firebird/munin conflict - fix fourstorehttp{,d} typo - fix ghostOne typo: the service module refers to gids.ghostone, so use that in ids - memcached uid conflicts with users gid - nagios uid conflicts with disks gid - nscd uid conflicts with wheel gid - ntp uid conflicts with tty gid - resolve postfix/postdrop id uid - redis uid conflicts with keys gid - sshd uid conflicts with kmem gid - tcryptd uid conflicts with openldap gid - unifi uid conflicts with docker gid - uptimed uid conflicts with utmp gid - zope2 uid conflicts with connman gid - tomcat uid/gid mismatch
2015-03-08 20:35:04 +00:00
#yandexdisk = 143; # unused
modules: add mxisd with test
2018-11-04 21:18:06 +00:00
mxisd = 144; # was once collectd
nixos: resolve uid/gid conflicts This patch resolves all uid/gid conflicts except for nobody/nogroup (seems to make sense that these are the same). All conflicts where determined mechanically, but resolutions were manual. This patch also marks uids/gids with no corresponding group/user as "unused" (aka. reserved). Briefly, - tss group conflicts with dhcpcd The tss group id conflicts with dhcpcd: assign a new number and add a corresponding tss user. - elasticsearch uid conflicts with haproxy gid - resolve firebird/munin conflict - fix fourstorehttp{,d} typo - fix ghostOne typo: the service module refers to gids.ghostone, so use that in ids - memcached uid conflicts with users gid - nagios uid conflicts with disks gid - nscd uid conflicts with wheel gid - ntp uid conflicts with tty gid - resolve postfix/postdrop id uid - redis uid conflicts with keys gid - sshd uid conflicts with kmem gid - tcryptd uid conflicts with openldap gid - unifi uid conflicts with docker gid - uptimed uid conflicts with utmp gid - zope2 uid conflicts with connman gid - tomcat uid/gid mismatch
2015-03-08 20:35:04 +00:00
#consul = 145; # unused
mailpile: add module
2014-09-26 09:03:29 +01:00
mailpile = 146;
nixos: add redmine service
2014-10-07 09:53:01 +01:00
redmine = 147;
seeks: nixos module
2014-10-06 20:25:10 +01:00
seeks = 148;
nixos: prosody was clashing with seeks unix ids
2014-10-20 16:22:01 +01:00
prosody = 149;
i2pd: added package, service
2014-11-09 08:44:47 +00:00
i2pd = 150;
nixos/ids: Fix systemd ids
2014-11-19 23:01:44 +00:00
systemd-network = 152;
systemd-resolve = 153;
systemd-timesync = 154;
initial liquidsoap service expression
2014-11-20 22:30:24 +00:00
liquidsoap = 155;
nixos: resolve uid/gid conflicts This patch resolves all uid/gid conflicts except for nobody/nogroup (seems to make sense that these are the same). All conflicts where determined mechanically, but resolutions were manual. This patch also marks uids/gids with no corresponding group/user as "unused" (aka. reserved). Briefly, - tss group conflicts with dhcpcd The tss group id conflicts with dhcpcd: assign a new number and add a corresponding tss user. - elasticsearch uid conflicts with haproxy gid - resolve firebird/munin conflict - fix fourstorehttp{,d} typo - fix ghostOne typo: the service module refers to gids.ghostone, so use that in ids - memcached uid conflicts with users gid - nagios uid conflicts with disks gid - nscd uid conflicts with wheel gid - ntp uid conflicts with tty gid - resolve postfix/postdrop id uid - redis uid conflicts with keys gid - sshd uid conflicts with kmem gid - tcryptd uid conflicts with openldap gid - unifi uid conflicts with docker gid - uptimed uid conflicts with utmp gid - zope2 uid conflicts with connman gid - tomcat uid/gid mismatch
2015-03-08 20:35:04 +00:00
#etcd = 156; # unused
Fix some uid/gid clashes
2015-03-03 19:21:36 +00:00
hbase = 158;
opentsdb = 159;
Fix some bad gids Issue #3727.
2015-01-05 10:58:17 +00:00
scollector = 160;
bosun = 161;
kubernetes = 162;
nixos: resolve uid/gid conflicts This patch resolves all uid/gid conflicts except for nobody/nogroup (seems to make sense that these are the same). All conflicts where determined mechanically, but resolutions were manual. This patch also marks uids/gids with no corresponding group/user as "unused" (aka. reserved). Briefly, - tss group conflicts with dhcpcd The tss group id conflicts with dhcpcd: assign a new number and add a corresponding tss user. - elasticsearch uid conflicts with haproxy gid - resolve firebird/munin conflict - fix fourstorehttp{,d} typo - fix ghostOne typo: the service module refers to gids.ghostone, so use that in ids - memcached uid conflicts with users gid - nagios uid conflicts with disks gid - nscd uid conflicts with wheel gid - ntp uid conflicts with tty gid - resolve postfix/postdrop id uid - redis uid conflicts with keys gid - sshd uid conflicts with kmem gid - tcryptd uid conflicts with openldap gid - unifi uid conflicts with docker gid - uptimed uid conflicts with utmp gid - zope2 uid conflicts with connman gid - tomcat uid/gid mismatch
2015-03-08 20:35:04 +00:00
#peerflix = 163; # unused
#chronos = 164; # unused
Fix some bad gids Issue #3727.
2015-01-05 10:58:17 +00:00
gitlab = 165;
Fix some uid/gid clashes
2015-03-03 19:21:36 +00:00
nylon = 168;
panamax: remove packages, module and test was broken and depends on (deprecated) fleet packages: panamax_api, panamax_ui
2018-05-04 23:22:18 +01:00
#panamax = 170; # unused
exim: add version 4.85 incl. nixos module
2015-02-18 18:55:07 +00:00
exim = 172;
fleet: remove package, module, test deprecated and unmaintained upstream
2018-05-04 23:09:43 +01:00
#fleet = 173; # unused
Add "input" group This is required by systemd >= 215.
2015-03-03 19:23:32 +00:00
input = 174;
nixos/sddm: add display manager
2015-03-02 17:58:35 +00:00
sddm = 175;
nixos: resolve uid/gid conflicts This patch resolves all uid/gid conflicts except for nobody/nogroup (seems to make sense that these are the same). All conflicts where determined mechanically, but resolutions were manual. This patch also marks uids/gids with no corresponding group/user as "unused" (aka. reserved). Briefly, - tss group conflicts with dhcpcd The tss group id conflicts with dhcpcd: assign a new number and add a corresponding tss user. - elasticsearch uid conflicts with haproxy gid - resolve firebird/munin conflict - fix fourstorehttp{,d} typo - fix ghostOne typo: the service module refers to gids.ghostone, so use that in ids - memcached uid conflicts with users gid - nagios uid conflicts with disks gid - nscd uid conflicts with wheel gid - ntp uid conflicts with tty gid - resolve postfix/postdrop id uid - redis uid conflicts with keys gid - sshd uid conflicts with kmem gid - tcryptd uid conflicts with openldap gid - unifi uid conflicts with docker gid - uptimed uid conflicts with utmp gid - zope2 uid conflicts with connman gid - tomcat uid/gid mismatch
2015-03-08 20:35:04 +00:00
tss = 176;
nixos/memcached: make unix sockets usuable before: - /var/run/memcached is a bad default for a socket path, since its parent directory must be writeable by memcached. - Socket directory was not created by the module itself -> this was left as a burden to the user? - Having a static uid with a dynamic user name is not very useful. after: - Replace services.memcached.socket by a boolean flag. This simplifies our code, since we do not have to check if the user specifies a path with a parent directory that should be owned by memcached (/run/memcached/memcached.sock -> /run/memcached). - Remove fixed uid/gid allocation. The only file ever owned by the daemon is the socket that will be recreated on every start. Therefore user and group ids do not need to be static. - only create the memcached user, if the user has not specified a different one. The major use case for changing option is to allow existing services (such as php-fpm) opening the local unix socket. If we would unconditionally create a user that option would be useless.
2018-01-03 11:10:45 +00:00
#memcached = 177; # unused, removed 2018-01-03
nixos: resolve uid/gid conflicts This patch resolves all uid/gid conflicts except for nobody/nogroup (seems to make sense that these are the same). All conflicts where determined mechanically, but resolutions were manual. This patch also marks uids/gids with no corresponding group/user as "unused" (aka. reserved). Briefly, - tss group conflicts with dhcpcd The tss group id conflicts with dhcpcd: assign a new number and add a corresponding tss user. - elasticsearch uid conflicts with haproxy gid - resolve firebird/munin conflict - fix fourstorehttp{,d} typo - fix ghostOne typo: the service module refers to gids.ghostone, so use that in ids - memcached uid conflicts with users gid - nagios uid conflicts with disks gid - nscd uid conflicts with wheel gid - ntp uid conflicts with tty gid - resolve postfix/postdrop id uid - redis uid conflicts with keys gid - sshd uid conflicts with kmem gid - tcryptd uid conflicts with openldap gid - unifi uid conflicts with docker gid - uptimed uid conflicts with utmp gid - zope2 uid conflicts with connman gid - tomcat uid/gid mismatch
2015-03-08 20:35:04 +00:00
#ntp = 179; # unused
nixos/zabbixWeb: replace httpd subservice with new module
2019-07-11 23:44:51 +01:00
zabbix = 180;
nixos/redis: remove static uid/gid assignment all files are chowned on startup
2018-01-03 10:15:47 +00:00
#redis = 181; # unused, removed 2018-01-03
nixos: resolve uid/gid conflicts This patch resolves all uid/gid conflicts except for nobody/nogroup (seems to make sense that these are the same). All conflicts where determined mechanically, but resolutions were manual. This patch also marks uids/gids with no corresponding group/user as "unused" (aka. reserved). Briefly, - tss group conflicts with dhcpcd The tss group id conflicts with dhcpcd: assign a new number and add a corresponding tss user. - elasticsearch uid conflicts with haproxy gid - resolve firebird/munin conflict - fix fourstorehttp{,d} typo - fix ghostOne typo: the service module refers to gids.ghostone, so use that in ids - memcached uid conflicts with users gid - nagios uid conflicts with disks gid - nscd uid conflicts with wheel gid - ntp uid conflicts with tty gid - resolve postfix/postdrop id uid - redis uid conflicts with keys gid - sshd uid conflicts with kmem gid - tcryptd uid conflicts with openldap gid - unifi uid conflicts with docker gid - uptimed uid conflicts with utmp gid - zope2 uid conflicts with connman gid - tomcat uid/gid mismatch
2015-03-08 20:35:04 +00:00
#unifi = 183; # unused
#uptimed = 184; # unused
#zope2 = 185; # unused
Add ripple data api package and nixos service
2015-03-22 22:12:11 +00:00
#ripple-data-api = 186; #unused
Add MediaTomb service
2015-03-27 10:48:50 +00:00
mediatomb = 187;
nixos/rdnssd: Major refactoring This updates rdnssd to the following: * Using the systemd interfaces directly * Using the rdnssd user instead of the root user * Integrating with resolvconf instead of writing directly to /etc/resolv.conf
2015-04-05 05:20:04 +01:00
#rdnssd = 188; # unused
ihaskell: re-enable
2017-11-06 06:29:56 +00:00
ihaskell = 189;
i2p: add nixos service
2015-04-15 11:52:06 +01:00
i2p = 190;
lambdabot: add nixos service
2015-04-14 00:06:37 +01:00
lambdabot = 191;
Fix asterisk & asterisk: 13.6.0 -> 14.1.2 (#20788) * fix/asterisk-module: use unix-group for asterisk-files * fix/asterisk-module: add configOption to use some default config-files * fix/asterisk-module: correction of skel copy * fix/asterisk-module: use /etc/asterisk as configDir * fix/asterisk-module: add reload; do not restart unit * asterisk: 13.6.0 -> 14.1.2 * fix/asterisk: compile with lua, pjsip, format_mp3 * fix/asterisk: fix indentation * fix/asterisk: remove broken flag
2016-12-28 22:04:58 +00:00
asterisk = 192;
plex: init at 0.9.11.16.958 Added a package and module for Plex Media Server, an application for managing media collections across multiple devices.
2015-04-16 19:15:59 +01:00
plex = 193;
Sane default configuration for sabnzbd module Added option to set user. Use unpriviledged user by default. Add sane default for configuration location.
2015-05-01 20:38:00 +01:00
sabnzbd = 194;
nixos: add grafana module
2015-04-25 15:02:44 +01:00
#grafana = 196; #unused
Add skydns module
2015-06-08 12:36:05 +01:00
#skydns = 197; #unused
ripple-rest: remove marked as broken for > 1 yr, development is frozen and author recommends moving to https://github.com/ripple/ripple-lib
2017-08-12 12:38:32 +01:00
# ripple-rest = 198; # unused, removed 2017-08-12
nixos/nix-serve: Run as a separate user and add a signing key parameter
2015-06-18 03:10:23 +01:00
#nix-serve = 199; #unused
tvheadend: init at 4.0.4
2015-06-20 21:33:57 +01:00
#tvheadend = 200; #unused
uwsgi-service: Add user/group for uwsgi service. Also add a uwsgi directory under /run (defaulting to /run/uwsgi) where the uwsgi user can place sockets.
2015-06-24 15:42:43 +01:00
uwsgi = 201;
nixos: added gitit service
2015-06-08 23:11:24 +01:00
gitit = 202;
Merge remote-tracking branch 'projectorhq/riemann-tools' Add riemann-tools package and service
2015-07-01 13:44:38 +01:00
riemanntools = 203;
subsonic service: init Add a systemd service and UID/GID for the Subsonic personal media streamer server (<http://subsonic.org>).
2015-07-04 01:42:16 +01:00
subsonic = 204;
riak: new nixos service
2015-07-21 11:16:18 +01:00
riak = 205;
shout service: New module.
2015-08-01 00:15:18 +01:00
#shout = 206; #unused
GateOne: init at 1.2
2015-07-31 05:22:44 +01:00
gateone = 207;
namecoind nixos module: security enhancements
2015-09-10 17:04:04 +01:00
namecoin = 208;
nixos/lxd: Add service
2015-09-14 07:27:31 +01:00
lxd = 210; # unused
kibana service: init
2015-09-18 23:18:43 +01:00
#kibana = 211;
xtreemfs: add nixos module
2015-09-13 13:49:19 +01:00
xtreemfs = 212;
calibre-server service: init
2015-09-28 04:31:17 +01:00
calibre-server = 213;
services/misc/bepasty: init at 2015-10-21 This module implements a way to start one or more bepasty servers. It supports configuring the listen address of gunicorn and how bepasty behaves internally. Configuring multiple bepasty servers provides a way to serve pastes externally without authentication and provide creating,listing,deleting pastes interally. nginx can be used to provide access via hostname + listen address. `configuration.nix`: services.bepasty = { enable = true; servers = { internal = { defaultPermissions = "admin,list,create,read,delete"; secretKey = "secret"; bind = "127.0.0.1:8000"; }; external = { defaultPermissions = "read"; bind = "127.0.0.1:8001"; secretKey = "another-secret"; }; }; };
2015-10-21 13:45:27 +01:00
bepasty = 215;
nixos/pump.io: also comment-out the uid
2018-03-04 09:48:29 +00:00
# pumpio = 216; # unused, removed 2018-02-24
networkmanager: set uid/gid for the networkmanager openvpn agent Fixes #11317
2015-12-08 16:46:57 +00:00
nm-openvpn = 217;
nixos/mathics: New service and test
2015-09-08 08:17:21 +01:00
mathics = 218;
nixos/ejabberd: update service
2016-01-03 02:36:19 +00:00
ejabberd = 219;
nixos/postsrsd: add module
2016-01-06 03:04:50 +00:00
postsrsd = 220;
nixos/opendkim: add module
2016-01-06 22:10:56 +00:00
opendkim = 221;
nixos/dspam: add module
2016-01-07 01:17:42 +00:00
dspam = 222;
gale: init at 1.1happy
2015-08-03 18:04:10 +01:00
gale = 223;
matrix-synapse: init at 0.12.0
2016-01-08 14:12:00 +00:00
matrix-synapse = 224;
nixos: Add module for rspamd
2016-01-12 09:06:46 +00:00
rspamd = 225;
rmilter: remove deprecated package (and module)
2019-08-23 14:24:35 +01:00
# rmilter = 226; # unused, removed 2019-08-22
cfdyndns: init at 0.0.1
2016-01-17 12:11:09 +00:00
cfdyndns = 227;
Merge branch 'pdnsd-service' of https://github.com/nfjinjing/nixpkgs Closes #12932
2016-02-16 17:35:01 +00:00
pdnsd = 229;
octoprint service: init
2016-02-14 11:58:09 +00:00
octoprint = 230;
radicale service: run with dedicated user This is done in the context of #11908.
2016-03-20 14:25:02 +00:00
radicale = 234;
syncthing: run daemon with dedicated user as default
2016-04-01 00:26:52 +01:00
syncthing = 237;
caddy service: initial implementation
2016-04-05 02:30:21 +01:00
caddy = 239;
Merge pull request #14476 (taskserver) This adds a Taskserver module along with documentation and a small helper tool which eases managing a custom CA along with Taskserver organisations, users and groups. Taskserver is the server component of Taskwarrior, a TODO list application for the command line. The work has been started by @matthiasbeyer back in mid 2015 and I have continued to work on it recently, so this merge contains commits from both of us. Thanks particularly to @nbp and @matthiasbeyer for reviewing and suggesting improvements. I've tested this with the new test (nixos/tests/taskserver.nix) this branch adds and it fails because of the changes introduced by the closure-size branch, so we need to do additional work on base of this.
2016-04-14 23:09:23 +01:00
taskd = 240;
nixos/factorio: sandbox service using systemd - DynamicUser enabled instead of static uid/gid - Enables most sandboxing options systemd offers
2019-05-01 20:56:58 +01:00
# factorio = 241; # unused
emby: Drop package and module and refer to jellyfin
2019-05-01 12:19:30 +01:00
# emby = 242; # unused, removed 2019-05-01
sniproxy service: init
2016-05-11 05:18:38 +01:00
sniproxy = 244;
nzbget: 16.4 -> 17.0-r1686 and nzbget service
2016-05-04 09:58:01 +01:00
nzbget = 245;
mosquitto service: init Initial Mosquitto MQTT Broker service file.
2016-05-22 15:07:26 +01:00
mosquitto = 246;
toxvpn: init at 20151111 (Authored by @cleverca22)
2016-05-29 23:07:54 +01:00
#toxvpn = 247; # unused
squeezelite service: init
2016-06-11 13:46:02 +01:00
#squeezelite = 248; #unused
coturn: init at 4.5.0.3 (#16284)
2016-06-21 11:59:29 +01:00
turnserver = 249;
smokeping: init at 2.6.11 (#17090) Includes a module for service setup and a test to verify functionality of both service and pkg.
2016-07-21 00:07:59 +01:00
smokeping = 250;
Add gocd agent and server service packages (#16273) GoCD is an open source continuous delivery server specializing in advanced workflow modeling and visualization. Update maintainers list to include swarren83. Update module list to include gocd agent and server module. Update packages list to include gocd agent and server package. Update version, revision and checksum for GoCD release 16.5.0.
2016-07-22 23:29:18 +01:00
gocd-agent = 251;
gocd-server = 252;
Add Terraria server service (#16832)
2016-08-07 02:58:38 +01:00
terraria = 253;
mattermost service: init
2016-08-15 02:17:53 +01:00
mattermost = 254;
prometheus service: add This is based on @benleys work: https://github.com/NixOS/nixpkgs/pull/8216 I updated changed the user and group ids.
2015-06-08 07:36:56 +01:00
prometheus = 255;
telegraf: init at 1.0.0 Signed-off-by: Jörg Thalheim <joerg@higgsboson.tk>
2016-09-08 14:30:20 +01:00
#telegraf = 256; # unused
gitlab-runner service: initial version
2016-09-17 12:08:18 +01:00
gitlab-runner = 257;
postgrey: init at 1.36 (includes service)
2015-11-17 17:30:10 +00:00
postgrey = 258;
hound: init module
2016-10-12 23:58:56 +01:00
hound = 259;
leaps: 0.5.1 + add a service + test
2016-11-06 09:33:21 +00:00
leaps = 260;
services: Add Interplanetary File System service Signed-off-by: Maximilian Güntner <code@klandest.in>
2016-10-30 19:39:53 +00:00
ipfs = 261;
stanchion: init at 2.1.1
2016-11-03 16:49:36 +00:00
stanchion = 262;
riak-cs: init at 2.1.1 riak-cs: added to all-packages Added Riak CS nix file to pkgs Added service file for Riak CS Removed Erlang_basho specific bindings from the Riak CS repo riak-cs: changed description riak-cs: added license riak-cs: added maintainer riak_cs: chgned indentations riak-cs: removed overly complex srcs mechanism riak-cs: added systemd module riak-cs: changed Erlang module to Basho-specific version riak-cs: made modular form riak-cs: Added a default package in service options riak-cs: Fixed default package in service options riak-cs: Patched Makefile riak_cs: added to module-list riak_cs: changed from string to actual package in modules riak-cs: changed example riak-cs: removed default riak-cs: changed to defaultText stanchion: changed default option to defaultText riak-cs: added defaults; changed types to str
2016-11-03 17:20:08 +00:00
riak-cs = 263;
infinoted service: init Service module for the dedicated gobby server included in libinfinity
2016-11-27 16:23:21 +00:00
infinoted = 264;
Add sickbeard module (with SickGear & SickRage)
2018-09-16 20:54:16 +01:00
sickbeard = 265;
headphones: init at 0.5.19
2018-09-16 20:47:47 +01:00
headphones = 266;
couchpotato module: init
2017-01-16 11:53:53 +00:00
couchpotato = 267;
gogs service: init
2016-10-09 18:04:42 +01:00
gogs = 268;
Revert "Revert "Merge master into staging-next"" In 87a19e9048773d5a363679617406ad148d36c3b8 I merged staging-next into master using the GitHub gui as intended. In ac241fb7a570d6cf81d229ad22a8889602639160 I merged master into staging-next for the next staging cycle, however, I accidentally pushed it to master. Thinking this may cause trouble, I reverted it in 0be87c79797a5fa384fbc356c74ed54f9f7829ea. This was however wrong, as it "removed" master. This reverts commit 0be87c79797a5fa384fbc356c74ed54f9f7829ea.
2020-02-05 18:27:16 +00:00
#kresd = 270; # switched to "knot-resolver" with dynamic ID
rpcbind service: use upstream systemd unit
2017-01-29 17:06:17 +00:00
#rpc = 271; # unused
nixos/geoip-updater: run as user 'geoip' instead of 'nobody' That way 'nobody' is prevented from messing with the databases.
2017-02-13 21:26:21 +00:00
#geoip = 272; # unused
fcron: 3.1.2 -> 3.2.1 fixes #23320 #23413
2017-03-05 21:40:01 +00:00
fcron = 273;
nixos: static ids for jackett, radarr, sonarr
2017-04-22 08:44:12 +01:00
sonarr = 274;
radarr = 275;
jackett = 276;
Merge branch 'master' into aria2.service
2017-04-27 15:50:13 +01:00
aria2 = 277;
Merge branch 'master' into clickhouse
2017-05-01 06:33:31 +01:00
clickhouse = 278;
resilio service: replaces btsync service, which is no longer supported upstream.
2017-06-01 15:50:17 +01:00
rslsync = 279;
minio service: add inital service features: - change listen port and address - configure config and data directory - basic test to check if minio server starts
2017-06-25 17:43:10 +01:00
minio = 280;
Reserve uid/gids for kanboard
2017-10-09 12:44:32 +01:00
kanboard = 281;
nixos pykms: run via DynamicUser
2018-03-26 08:16:22 +01:00
# pykms = 282; # DynamicUser = true
nixos user: reserve kodi
2017-10-13 03:34:27 +01:00
kodi = 283;
ixos ids: reserve restya-board
2017-11-22 11:11:46 +00:00
restya-board = 284;
nixos/mighttpd2: init
2018-01-04 17:19:54 +00:00
mighttpd2 = 285;
home-assistant: add NixOS module
2018-01-23 09:51:13 +00:00
hass = 286;
nixos/monero: init
2018-02-05 21:02:14 +00:00
monero = 287;
nixos/ceph: init module (#35299) All 5 daemon types can be enabled and configured through the module and the module both creates the ceph.conf required but also creates and enables specific services for each daemon, based on the systemd service files that upstream provides.
2018-03-01 11:47:13 +00:00
ceph = 288;
duplicati: create service
2018-04-07 20:23:04 +01:00
duplicati = 289;
nixos/monetdb: init (#39812)
2018-05-01 15:44:12 +01:00
monetdb = 290;
restic-rest-server module: init
2018-05-03 20:30:06 +01:00
restic = 291;
ids: assing openvpn
2018-05-26 04:11:48 +01:00
openvpn = 292;
meguca: init at git-2018-05-17
2018-05-18 00:56:58 +01:00
meguca = 293;
nixos/hadoop: add hadoop module (hdfs, yarn)
2018-05-21 02:09:31 +01:00
yarn = 294;
hdfs = 295;
mapred = 296;
hadoop = 297;
nixos/hydron: init
2018-07-11 00:10:02 +01:00
hydron = 298;
nixos/cfssl: init - based on module originally written by @srhb - complies with available options in cfssl v1.3.2 - uid and gid 299 reserved in ids.nix - added simple nixos test case
2018-07-26 15:25:34 +01:00
cfssl = 299;
cassandra: rewrote service from scratch Adds a replacement for the previously broken `services.database.cassandra` with tests for a multi-node setup.
2017-11-07 13:11:56 +00:00
cassandra = 300;
nixos/libvirtd: add option to run qemu as non-root New option virtualisation.libvirtd.qemuRunAsRoot (default: true). If false, qemu is run as non-privileged user qemu-libvirtd, reducing security risk
2018-03-17 23:22:53 +00:00
qemu-libvirtd = 301;
systemd: added groups kvm, render they need to exist according to the README of systemd
2018-08-15 21:10:31 +01:00
kvm = 302; # default udev rules from systemd requires these
render = 303; # default udev rules from systemd requires these
nixos/zeronet: remove static uid and gid
2019-10-03 07:25:08 +01:00
# zeronet = 304; # removed 2019-01-03
initial NixOS module for LIRC
2017-11-25 21:41:19 +00:00
lirc = 305;
lidarr: init at 0.3.1.471 Fork of sonarr (as radarr) but for music instead of series and movies.
2018-09-09 11:10:04 +01:00
lidarr = 306;
nixos/slurm: run ctld as user and fix spool dir * run as user 'slurm' per default instead of root * add user/group slurm to ids.nix * fix default location for the state dir of slurmctld: (/var/spool -> /var/spool/slurmctld) * Update release notes with the above changes
2018-10-23 22:43:53 +01:00
slurm = 307;
nixos/kapacitor: new service
2018-11-01 20:52:17 +00:00
kapacitor = 308;
solr: 4.10.3 -> 7.5.0, refactor service to reflect major changes in version bump, NixOS test included
2018-11-03 17:14:13 +00:00
solr = 309;
nixos/alerta: create new module + add kapacitor integration
2018-11-08 21:34:23 +00:00
alerta = 310;
nixos/minetest fix: add missing uid/gid for minetest
2018-11-11 11:41:27 +00:00
minetest = 311;
rss2email module: init Also adding `system-sendmail` package for sharing the code with other modules or packages needing it.
2018-10-27 10:33:43 +01:00
rss2email = 312;
nixos/cockroachdb: create new service This also includes a full end-to-end CockroachDB clustering test to ensure everything basically works. However, this test is not currently enabled by default, though it can be run manually. See the included comments in the test for more information. Closes #51306. Closes #38665. Co-authored-by: Austin Seipp <aseipp@pobox.com> Signed-off-by: Austin Seipp <aseipp@pobox.com>
2018-04-10 02:16:33 +01:00
cockroachdb = 313;
zoneminder: add user for NixOS
2019-01-09 02:58:32 +00:00
zoneminder = 314;
paperless service: init
2019-01-27 14:26:31 +00:00
paperless = 315;
nixos/mailman: don't reserve a static uid in the system Any system uid will do, so we let the system allocate one for us. The 'mailman' group is gone entirely since we don't need it. Users who wish to run the 'mailman' administration utility can do so via 'sudo': $ sudo -u mailman mailman info Also, simplify the syntax of our user.users entry to rely on an attribute set rather than a list.
2019-08-30 16:55:59 +01:00
#mailman = 316; # removed 2019-08-30
nixos/zigbee2mqtt: init
2019-10-27 17:28:53 +00:00
zigbee2mqtt = 317;
prosody: packaged as a service Conflicts: nixos/modules/misc/ids.nix
2014-09-02 16:08:56 +01:00
Fix some bad gids Issue #3727.
2015-01-05 10:58:17 +00:00
# When adding a gid, make sure it doesn't match an existing
# uid. Users and groups with the same name should have equal
# uids and gids. Also, don't use gids above 399!
4Store SPARQL endpoint: packaged svn path=/nixos/trunk/; revision=26853
2011-04-15 17:10:17 +01:00
Update all legacy-style modules I.e., modules that use "require = [options]". Nowadays that should be written as { options = { ... }; config = { ... }; }; Also, use "imports" instead of "require" in places where we actually import another module.
2013-09-04 12:05:09 +01:00
users = 100;
nixbld = 30000;
nogroup = 65534;
};
* Add some groups required by the latest udev. svn path=/nixos/trunk/; revision=16667
2009-08-11 10:17:30 +01:00
* Declarative specification of user accounts. Jobs can now specify a list of user accounts that the job needs to run. For instance, the SSH daemon job says: { name = "sshd"; uid = (import ../system/ids.nix).uids.sshd; description = "SSH privilege separation user"; home = "/var/empty"; } The activation script creates the system users/groups and updates them as well. So a change in the Nix expression can be realised in /etc/{group,passwd} by running nixos-rebuild. svn path=/nixos/trunk/; revision=8846
2007-06-08 16:41:12 +01:00
};
}
Copy permalink