alioth/nixpkgs
3
0
Fork 0
forked from mirrors/nixpkgs
Code Releases Activity
nixpkgs/nixos/modules/misc/ids.nix

Ignoring revisions in .git-blame-ignore-revs. Click here to bypass and see the normal blame view.

701 lines
20 KiB
Nix
Raw Normal View History

* Move the uid/gid mappings into a module. This allows other modules to use it through config.ids.{uids,gids} rather than `import relative-path/ids.nix'. svn path=/nixos/branches/modular-nixos/; revision=15796
2009-05-29 15:25:56 +01:00
# This module defines the global list of uids and gids. We keep a
Fix typos, especially those that end up in the NixOS manual
2013-08-10 22:07:13 +01:00
# central list to prevent id collisions.
* Move the uid/gid mappings into a module. This allows other modules to use it through config.ids.{uids,gids} rather than `import relative-path/ids.nix'. svn path=/nixos/branches/modular-nixos/; revision=15796
2009-05-29 15:25:56 +01:00
nixos/ids: information when to use static uids/gids
2018-05-20 10:52:03 +01:00
# IMPORTANT!
# We only add static uids and gids for services where it is not feasible
nixos/ids: fix typo in comment
2022-06-28 12:58:47 +01:00
# to change uids/gids on service start, for example a service with a lot of
nixos/ids: information when to use static uids/gids
2018-05-20 10:52:03 +01:00
# files. Please also check if the service is applicable for systemd's
# DynamicUser option and does not need a uid/gid allocation at all.
# Systemd can also change ownership of service directories using the
# RuntimeDirectory/StateDirectory options.
[bot] nixos/*: remove unused arguments in lambdas
2018-07-20 21:56:59 +01:00
{ lib, ... }:
* Move the uid/gid mappings into a module. This allows other modules to use it through config.ids.{uids,gids} rather than `import relative-path/ids.nix'. svn path=/nixos/branches/modular-nixos/; revision=15796
2009-05-29 15:25:56 +01:00
nixos/ids: Add types to allow overrides on static uids, gids
2019-11-18 08:08:10 +00:00
let
inherit (lib) types;
in
Update all legacy-style modules I.e., modules that use "require = [options]". Nowadays that should be written as { options = { ... }; config = { ... }; }; Also, use "imports" instead of "require" in places where we actually import another module.
2013-09-04 12:05:09 +01:00
{
* Move the uid/gid mappings into a module. This allows other modules to use it through config.ids.{uids,gids} rather than `import relative-path/ids.nix'. svn path=/nixos/branches/modular-nixos/; revision=15796
2009-05-29 15:25:56 +01:00
options = {
Get all lib functions from lib, not pkgs.lib, in modules
2014-05-05 19:58:51 +01:00
ids.uids = lib.mkOption {
Add lots of missing option types
2013-10-30 16:37:45 +00:00
internal = true;
nixos/*: convert internal option descriptions to MD we'll have to do it eventually, may as well be now.
2022-08-29 00:38:36 +01:00
description = lib.mdDoc ''
* Move the uid/gid mappings into a module. This allows other modules to use it through config.ids.{uids,gids} rather than `import relative-path/ids.nix'. svn path=/nixos/branches/modular-nixos/; revision=15796
2009-05-29 15:25:56 +01:00
The user IDs used in NixOS.
'';
nixos/ids: Add types to allow overrides on static uids, gids
2019-11-18 08:08:10 +00:00
type = types.attrsOf types.int;
* Move the uid/gid mappings into a module. This allows other modules to use it through config.ids.{uids,gids} rather than `import relative-path/ids.nix'. svn path=/nixos/branches/modular-nixos/; revision=15796
2009-05-29 15:25:56 +01:00
};
Get all lib functions from lib, not pkgs.lib, in modules
2014-05-05 19:58:51 +01:00
ids.gids = lib.mkOption {
Add lots of missing option types
2013-10-30 16:37:45 +00:00
internal = true;
nixos/*: convert internal option descriptions to MD we'll have to do it eventually, may as well be now.
2022-08-29 00:38:36 +01:00
description = lib.mdDoc ''
* Move the uid/gid mappings into a module. This allows other modules to use it through config.ids.{uids,gids} rather than `import relative-path/ids.nix'. svn path=/nixos/branches/modular-nixos/; revision=15796
2009-05-29 15:25:56 +01:00
The group IDs used in NixOS.
'';
nixos/ids: Add types to allow overrides on static uids, gids
2019-11-18 08:08:10 +00:00
type = types.attrsOf types.int;
* Move the uid/gid mappings into a module. This allows other modules to use it through config.ids.{uids,gids} rather than `import relative-path/ids.nix'. svn path=/nixos/branches/modular-nixos/; revision=15796
2009-05-29 15:25:56 +01:00
};
};
strip trailing whitespace; no functional change svn path=/nixos/trunk/; revision=29285
2011-09-14 19:20:50 +01:00
Update all legacy-style modules I.e., modules that use "require = [options]". Nowadays that should be written as { options = { ... }; config = { ... }; }; Also, use "imports" instead of "require" in places where we actually import another module.
2013-09-04 12:05:09 +01:00
config = {
* Declarative specification of user accounts. Jobs can now specify a list of user accounts that the job needs to run. For instance, the SSH daemon job says: { name = "sshd"; uid = (import ../system/ids.nix).uids.sshd; description = "SSH privilege separation user"; home = "/var/empty"; } The activation script creates the system users/groups and updates them as well. So a change in the Nix expression can be realised in /etc/{group,passwd} by running nixos-rebuild. svn path=/nixos/trunk/; revision=8846
2007-06-08 16:41:12 +01:00
Update all legacy-style modules I.e., modules that use "require = [options]". Nowadays that should be written as { options = { ... }; config = { ... }; }; Also, use "imports" instead of "require" in places where we actually import another module.
2013-09-04 12:05:09 +01:00
ids.uids = {
root = 0;
nixos: resolve uid/gid conflicts This patch resolves all uid/gid conflicts except for nobody/nogroup (seems to make sense that these are the same). All conflicts where determined mechanically, but resolutions were manual. This patch also marks uids/gids with no corresponding group/user as "unused" (aka. reserved). Briefly, - tss group conflicts with dhcpcd The tss group id conflicts with dhcpcd: assign a new number and add a corresponding tss user. - elasticsearch uid conflicts with haproxy gid - resolve firebird/munin conflict - fix fourstorehttp{,d} typo - fix ghostOne typo: the service module refers to gids.ghostone, so use that in ids - memcached uid conflicts with users gid - nagios uid conflicts with disks gid - nscd uid conflicts with wheel gid - ntp uid conflicts with tty gid - resolve postfix/postdrop id uid - redis uid conflicts with keys gid - sshd uid conflicts with kmem gid - tcryptd uid conflicts with openldap gid - unifi uid conflicts with docker gid - uptimed uid conflicts with utmp gid - zope2 uid conflicts with connman gid - tomcat uid/gid mismatch
2015-03-08 20:35:04 +00:00
#wheel = 1; # unused
#kmem = 2; # unused
#tty = 3; # unused
Update all legacy-style modules I.e., modules that use "require = [options]". Nowadays that should be written as { options = { ... }; config = { ... }; }; Also, use "imports" instead of "require" in places where we actually import another module.
2013-09-04 12:05:09 +01:00
messagebus = 4; # D-Bus
haldaemon = 5;
nixos: resolve uid/gid conflicts This patch resolves all uid/gid conflicts except for nobody/nogroup (seems to make sense that these are the same). All conflicts where determined mechanically, but resolutions were manual. This patch also marks uids/gids with no corresponding group/user as "unused" (aka. reserved). Briefly, - tss group conflicts with dhcpcd The tss group id conflicts with dhcpcd: assign a new number and add a corresponding tss user. - elasticsearch uid conflicts with haproxy gid - resolve firebird/munin conflict - fix fourstorehttp{,d} typo - fix ghostOne typo: the service module refers to gids.ghostone, so use that in ids - memcached uid conflicts with users gid - nagios uid conflicts with disks gid - nscd uid conflicts with wheel gid - ntp uid conflicts with tty gid - resolve postfix/postdrop id uid - redis uid conflicts with keys gid - sshd uid conflicts with kmem gid - tcryptd uid conflicts with openldap gid - unifi uid conflicts with docker gid - uptimed uid conflicts with utmp gid - zope2 uid conflicts with connman gid - tomcat uid/gid mismatch
2015-03-08 20:35:04 +00:00
#disk = 6; # unused
nixos/vsftpd: allocate group; fix fallout of #133166
2021-09-14 13:00:00 +01:00
#vsftpd = 7; # dynamically allocated ass of 2021-09-14
Update all legacy-style modules I.e., modules that use "require = [options]". Nowadays that should be written as { options = { ... }; config = { ... }; }; Also, use "imports" instead of "require" in places where we actually import another module.
2013-09-04 12:05:09 +01:00
ftp = 8;
nixos/bitlbee: switched to systemd DynamicUser
2021-09-30 08:54:49 +01:00
# bitlbee = 9; # removed 2021-10-05 #139765
nixos/ids: remove avahi uid/gid
2019-05-22 21:01:55 +01:00
#avahi = 10; # removed 2019-05-22
nixos: resolve uid/gid conflicts This patch resolves all uid/gid conflicts except for nobody/nogroup (seems to make sense that these are the same). All conflicts where determined mechanically, but resolutions were manual. This patch also marks uids/gids with no corresponding group/user as "unused" (aka. reserved). Briefly, - tss group conflicts with dhcpcd The tss group id conflicts with dhcpcd: assign a new number and add a corresponding tss user. - elasticsearch uid conflicts with haproxy gid - resolve firebird/munin conflict - fix fourstorehttp{,d} typo - fix ghostOne typo: the service module refers to gids.ghostone, so use that in ids - memcached uid conflicts with users gid - nagios uid conflicts with disks gid - nscd uid conflicts with wheel gid - ntp uid conflicts with tty gid - resolve postfix/postdrop id uid - redis uid conflicts with keys gid - sshd uid conflicts with kmem gid - tcryptd uid conflicts with openldap gid - unifi uid conflicts with docker gid - uptimed uid conflicts with utmp gid - zope2 uid conflicts with connman gid - tomcat uid/gid mismatch
2015-03-08 20:35:04 +00:00
nagios = 11;
Update all legacy-style modules I.e., modules that use "require = [options]". Nowadays that should be written as { options = { ... }; config = { ... }; }; Also, use "imports" instead of "require" in places where we actually import another module.
2013-09-04 12:05:09 +01:00
atd = 12;
nixos: resolve uid/gid conflicts This patch resolves all uid/gid conflicts except for nobody/nogroup (seems to make sense that these are the same). All conflicts where determined mechanically, but resolutions were manual. This patch also marks uids/gids with no corresponding group/user as "unused" (aka. reserved). Briefly, - tss group conflicts with dhcpcd The tss group id conflicts with dhcpcd: assign a new number and add a corresponding tss user. - elasticsearch uid conflicts with haproxy gid - resolve firebird/munin conflict - fix fourstorehttp{,d} typo - fix ghostOne typo: the service module refers to gids.ghostone, so use that in ids - memcached uid conflicts with users gid - nagios uid conflicts with disks gid - nscd uid conflicts with wheel gid - ntp uid conflicts with tty gid - resolve postfix/postdrop id uid - redis uid conflicts with keys gid - sshd uid conflicts with kmem gid - tcryptd uid conflicts with openldap gid - unifi uid conflicts with docker gid - uptimed uid conflicts with utmp gid - zope2 uid conflicts with connman gid - tomcat uid/gid mismatch
2015-03-08 20:35:04 +00:00
postfix = 13;
#postdrop = 14; # unused
Update all legacy-style modules I.e., modules that use "require = [options]". Nowadays that should be written as { options = { ... }; config = { ... }; }; Also, use "imports" instead of "require" in places where we actually import another module.
2013-09-04 12:05:09 +01:00
dovecot = 15;
tomcat = 16;
nixos: resolve uid/gid conflicts This patch resolves all uid/gid conflicts except for nobody/nogroup (seems to make sense that these are the same). All conflicts where determined mechanically, but resolutions were manual. This patch also marks uids/gids with no corresponding group/user as "unused" (aka. reserved). Briefly, - tss group conflicts with dhcpcd The tss group id conflicts with dhcpcd: assign a new number and add a corresponding tss user. - elasticsearch uid conflicts with haproxy gid - resolve firebird/munin conflict - fix fourstorehttp{,d} typo - fix ghostOne typo: the service module refers to gids.ghostone, so use that in ids - memcached uid conflicts with users gid - nagios uid conflicts with disks gid - nscd uid conflicts with wheel gid - ntp uid conflicts with tty gid - resolve postfix/postdrop id uid - redis uid conflicts with keys gid - sshd uid conflicts with kmem gid - tcryptd uid conflicts with openldap gid - unifi uid conflicts with docker gid - uptimed uid conflicts with utmp gid - zope2 uid conflicts with connman gid - tomcat uid/gid mismatch
2015-03-08 20:35:04 +00:00
#audio = 17; # unused
#floppy = 18; # unused
modules: HylaFAX server configuration This commit adds the following * the uucp user * options for HylaFAX server to control startup and modems * systemd services for HylaFAX server processes including faxgettys for modems * systemd services to maintain the HylaFAX spool area, including cleanup with faxcron and faxqclean * default configuration for all server processes for a minimal working configuration Some notes: * HylaFAX configuration cannot be initialized with faxsetup (as it would be common on other Linux distributions). The hylafaxplus package contains a template spool area. * Modems are controlled by faxgetty. Send-only configuration (modems controlled by faxq) is not supported by this configuration setup. * To enable the service, one or more modems must be defined with config.services.hylafax.modems . * Sending mail *should* work: HylaFAX will use whatever is in config.services.mail.sendmailSetuidWrapper.program unless overridden with the sendmailPath option. * The admin has to create a hosts.hfaxd file somewhere (e.g. in /etc) before enabling HylaFAX. This file controls access to the server (see hosts.hfaxd(5) ). Sadly, HylaFAX does not permit account-based access control as is accepts connections via TCP only. * Active fax polling should work; I can't test it. * Passive fax polling is not supported by HylaFAX. * Pager transmissions (with sendpage) are disabled by default. I have never tested or used these. * Incoming data/voice/"extern"al calls won't be handled by default. I have never tested or used these.
2018-08-04 16:08:54 +01:00
uucp = 19;
nixos: resolve uid/gid conflicts This patch resolves all uid/gid conflicts except for nobody/nogroup (seems to make sense that these are the same). All conflicts where determined mechanically, but resolutions were manual. This patch also marks uids/gids with no corresponding group/user as "unused" (aka. reserved). Briefly, - tss group conflicts with dhcpcd The tss group id conflicts with dhcpcd: assign a new number and add a corresponding tss user. - elasticsearch uid conflicts with haproxy gid - resolve firebird/munin conflict - fix fourstorehttp{,d} typo - fix ghostOne typo: the service module refers to gids.ghostone, so use that in ids - memcached uid conflicts with users gid - nagios uid conflicts with disks gid - nscd uid conflicts with wheel gid - ntp uid conflicts with tty gid - resolve postfix/postdrop id uid - redis uid conflicts with keys gid - sshd uid conflicts with kmem gid - tcryptd uid conflicts with openldap gid - unifi uid conflicts with docker gid - uptimed uid conflicts with utmp gid - zope2 uid conflicts with connman gid - tomcat uid/gid mismatch
2015-03-08 20:35:04 +00:00
#lp = 20; # unused
nixos: add optional process information hiding This module adds an option `security.hideProcessInformation` that, when enabled, restricts access to process information such as command-line arguments to the process owner. The module adds a static group "proc" whose members are exempt from process information hiding. Ideally, this feature would be implemented by simply adding the appropriate mount options to `fileSystems."/proc".fsOptions`, but this was found to not work in vmtests. To ensure that process information hiding is enforced, we use a systemd service unit that remounts `/proc` after `systemd-remount-fs.service` has completed. To verify the correctness of the feature, simple tests were added to nixos/tests/misc: the test ensures that unprivileged users cannot see process information owned by another user, while members of "proc" CAN. Thanks to @abbradar for feedback and suggestions.
2016-04-09 19:22:16 +01:00
#proc = 21; # unused
Update all legacy-style modules I.e., modules that use "require = [options]". Nowadays that should be written as { options = { ... }; config = { ... }; }; Also, use "imports" instead of "require" in places where we actually import another module.
2013-09-04 12:05:09 +01:00
pulseaudio = 22; # must match `pulseaudio' GID
gpsd = 23;
nixos: resolve uid/gid conflicts This patch resolves all uid/gid conflicts except for nobody/nogroup (seems to make sense that these are the same). All conflicts where determined mechanically, but resolutions were manual. This patch also marks uids/gids with no corresponding group/user as "unused" (aka. reserved). Briefly, - tss group conflicts with dhcpcd The tss group id conflicts with dhcpcd: assign a new number and add a corresponding tss user. - elasticsearch uid conflicts with haproxy gid - resolve firebird/munin conflict - fix fourstorehttp{,d} typo - fix ghostOne typo: the service module refers to gids.ghostone, so use that in ids - memcached uid conflicts with users gid - nagios uid conflicts with disks gid - nscd uid conflicts with wheel gid - ntp uid conflicts with tty gid - resolve postfix/postdrop id uid - redis uid conflicts with keys gid - sshd uid conflicts with kmem gid - tcryptd uid conflicts with openldap gid - unifi uid conflicts with docker gid - uptimed uid conflicts with utmp gid - zope2 uid conflicts with connman gid - tomcat uid/gid mismatch
2015-03-08 20:35:04 +00:00
#cdrom = 24; # unused
#tape = 25; # unused
#video = 26; # unused
#dialout = 27; # unused
Update all legacy-style modules I.e., modules that use "require = [options]". Nowadays that should be written as { options = { ... }; config = { ... }; }; Also, use "imports" instead of "require" in places where we actually import another module.
2013-09-04 12:05:09 +01:00
polkituser = 28;
nixos: resolve uid/gid conflicts This patch resolves all uid/gid conflicts except for nobody/nogroup (seems to make sense that these are the same). All conflicts where determined mechanically, but resolutions were manual. This patch also marks uids/gids with no corresponding group/user as "unused" (aka. reserved). Briefly, - tss group conflicts with dhcpcd The tss group id conflicts with dhcpcd: assign a new number and add a corresponding tss user. - elasticsearch uid conflicts with haproxy gid - resolve firebird/munin conflict - fix fourstorehttp{,d} typo - fix ghostOne typo: the service module refers to gids.ghostone, so use that in ids - memcached uid conflicts with users gid - nagios uid conflicts with disks gid - nscd uid conflicts with wheel gid - ntp uid conflicts with tty gid - resolve postfix/postdrop id uid - redis uid conflicts with keys gid - sshd uid conflicts with kmem gid - tcryptd uid conflicts with openldap gid - unifi uid conflicts with docker gid - uptimed uid conflicts with utmp gid - zope2 uid conflicts with connman gid - tomcat uid/gid mismatch
2015-03-08 20:35:04 +00:00
#utmp = 29; # unused
nixos ddclient: support multiple domains and run via systemd timer a) Some providers can update multiple domains - support that. b) Make "zone" and "script" configurable. Some providers require these. c) Instead of leaving the ddclient daemon running all the time, use a systemd timer to kick it off. d) Don't use a predefined user - run everything via DynamicUser e) Add documentation
2018-03-12 15:25:28 +00:00
# ddclient = 30; # converted to DynamicUser = true
Update all legacy-style modules I.e., modules that use "require = [options]". Nowadays that should be written as { options = { ... }; config = { ... }; }; Also, use "imports" instead of "require" in places where we actually import another module.
2013-09-04 12:05:09 +01:00
davfs2 = 31;
nixos/misc/ids: reclaim uid for disnix
2021-03-28 20:40:30 +01:00
disnix = 33;
Update all legacy-style modules I.e., modules that use "require = [options]". Nowadays that should be written as { options = { ... }; config = { ... }; }; Also, use "imports" instead of "require" in places where we actually import another module.
2013-09-04 12:05:09 +01:00
osgi = 34;
tor = 35;
cups = 36;
Fix some uid/gid attributes to match the actual user/group name
2014-04-29 09:51:42 +01:00
foldingathome = 37;
Update all legacy-style modules I.e., modules that use "require = [options]". Nowadays that should be written as { options = { ... }; config = { ... }; }; Also, use "imports" instead of "require" in places where we actually import another module.
2013-09-04 12:05:09 +01:00
sabnzbd = 38;
kdm: drop service
2017-02-11 18:55:09 +00:00
#kdm = 39; # dropped in 17.03
ghostOne: remove broken and unmaintained
2017-12-27 14:28:11 +00:00
#ghostone = 40; # dropped in 18.03
Update all legacy-style modules I.e., modules that use "require = [options]". Nowadays that should be written as { options = { ... }; config = { ... }; }; Also, use "imports" instead of "require" in places where we actually import another module.
2013-09-04 12:05:09 +01:00
git = 41;
rdf4store: remove pkg and service modules (#74214)
2019-12-08 19:33:51 +00:00
#fourstore = 42; # dropped in 20.03
#fourstorehttp = 43; # dropped in 20.03
nixos/virtuoso: drop
2021-12-15 18:33:29 +00:00
#virtuoso = 44; dropped module
nixos: define the primary group of users where needed
2021-08-08 13:00:00 +01:00
#rtkit = 45; # dynamically allocated 2021-09-03
Update all legacy-style modules I.e., modules that use "require = [options]". Nowadays that should be written as { options = { ... }; config = { ... }; }; Also, use "imports" instead of "require" in places where we actually import another module.
2013-09-04 12:05:09 +01:00
dovecot2 = 46;
dovenull2 = 47;
prayer = 49;
mpd = 50;
clamav = 51;
Remove F-PROT package and service module (EoL) (#160372)
2022-03-02 19:51:47 +00:00
#fprot = 52; # unused
nixos: define the primary group of users where needed
2021-08-08 13:00:00 +01:00
# bind = 53; #dynamically allocated as of 2021-09-03
Update all legacy-style modules I.e., modules that use "require = [options]". Nowadays that should be written as { options = { ... }; config = { ... }; }; Also, use "imports" instead of "require" in places where we actually import another module.
2013-09-04 12:05:09 +01:00
wwwrun = 54;
nixos: resolve uid/gid conflicts This patch resolves all uid/gid conflicts except for nobody/nogroup (seems to make sense that these are the same). All conflicts where determined mechanically, but resolutions were manual. This patch also marks uids/gids with no corresponding group/user as "unused" (aka. reserved). Briefly, - tss group conflicts with dhcpcd The tss group id conflicts with dhcpcd: assign a new number and add a corresponding tss user. - elasticsearch uid conflicts with haproxy gid - resolve firebird/munin conflict - fix fourstorehttp{,d} typo - fix ghostOne typo: the service module refers to gids.ghostone, so use that in ids - memcached uid conflicts with users gid - nagios uid conflicts with disks gid - nscd uid conflicts with wheel gid - ntp uid conflicts with tty gid - resolve postfix/postdrop id uid - redis uid conflicts with keys gid - sshd uid conflicts with kmem gid - tcryptd uid conflicts with openldap gid - unifi uid conflicts with docker gid - uptimed uid conflicts with utmp gid - zope2 uid conflicts with connman gid - tomcat uid/gid mismatch
2015-03-08 20:35:04 +00:00
#adm = 55; # unused
Update all legacy-style modules I.e., modules that use "require = [options]". Nowadays that should be written as { options = { ... }; config = { ... }; }; Also, use "imports" instead of "require" in places where we actually import another module.
2013-09-04 12:05:09 +01:00
spamd = 56;
nixos: resolve uid/gid conflicts This patch resolves all uid/gid conflicts except for nobody/nogroup (seems to make sense that these are the same). All conflicts where determined mechanically, but resolutions were manual. This patch also marks uids/gids with no corresponding group/user as "unused" (aka. reserved). Briefly, - tss group conflicts with dhcpcd The tss group id conflicts with dhcpcd: assign a new number and add a corresponding tss user. - elasticsearch uid conflicts with haproxy gid - resolve firebird/munin conflict - fix fourstorehttp{,d} typo - fix ghostOne typo: the service module refers to gids.ghostone, so use that in ids - memcached uid conflicts with users gid - nagios uid conflicts with disks gid - nscd uid conflicts with wheel gid - ntp uid conflicts with tty gid - resolve postfix/postdrop id uid - redis uid conflicts with keys gid - sshd uid conflicts with kmem gid - tcryptd uid conflicts with openldap gid - unifi uid conflicts with docker gid - uptimed uid conflicts with utmp gid - zope2 uid conflicts with connman gid - tomcat uid/gid mismatch
2015-03-08 20:35:04 +00:00
#networkmanager = 57; # unused
Update all legacy-style modules I.e., modules that use "require = [options]". Nowadays that should be written as { options = { ... }; config = { ... }; }; Also, use "imports" instead of "require" in places where we actually import another module.
2013-09-04 12:05:09 +01:00
nslcd = 58;
sane service: add saned support
2016-11-11 00:49:02 +00:00
scanner = 59;
Update all legacy-style modules I.e., modules that use "require = [options]". Nowadays that should be written as { options = { ... }; config = { ... }; }; Also, use "imports" instead of "require" in places where we actually import another module.
2013-09-04 12:05:09 +01:00
nginx = 60;
chrony = 61;
nixos: resolve uid/gid conflicts This patch resolves all uid/gid conflicts except for nobody/nogroup (seems to make sense that these are the same). All conflicts where determined mechanically, but resolutions were manual. This patch also marks uids/gids with no corresponding group/user as "unused" (aka. reserved). Briefly, - tss group conflicts with dhcpcd The tss group id conflicts with dhcpcd: assign a new number and add a corresponding tss user. - elasticsearch uid conflicts with haproxy gid - resolve firebird/munin conflict - fix fourstorehttp{,d} typo - fix ghostOne typo: the service module refers to gids.ghostone, so use that in ids - memcached uid conflicts with users gid - nagios uid conflicts with disks gid - nscd uid conflicts with wheel gid - ntp uid conflicts with tty gid - resolve postfix/postdrop id uid - redis uid conflicts with keys gid - sshd uid conflicts with kmem gid - tcryptd uid conflicts with openldap gid - unifi uid conflicts with docker gid - uptimed uid conflicts with utmp gid - zope2 uid conflicts with connman gid - tomcat uid/gid mismatch
2015-03-08 20:35:04 +00:00
#systemd-journal = 62; # unused
Update all legacy-style modules I.e., modules that use "require = [options]". Nowadays that should be written as { options = { ... }; config = { ... }; }; Also, use "imports" instead of "require" in places where we actually import another module.
2013-09-04 12:05:09 +01:00
smtpd = 63;
smtpq = 64;
supybot = 65;
iodined = 66;
nixos: resolve uid/gid conflicts This patch resolves all uid/gid conflicts except for nobody/nogroup (seems to make sense that these are the same). All conflicts where determined mechanically, but resolutions were manual. This patch also marks uids/gids with no corresponding group/user as "unused" (aka. reserved). Briefly, - tss group conflicts with dhcpcd The tss group id conflicts with dhcpcd: assign a new number and add a corresponding tss user. - elasticsearch uid conflicts with haproxy gid - resolve firebird/munin conflict - fix fourstorehttp{,d} typo - fix ghostOne typo: the service module refers to gids.ghostone, so use that in ids - memcached uid conflicts with users gid - nagios uid conflicts with disks gid - nscd uid conflicts with wheel gid - ntp uid conflicts with tty gid - resolve postfix/postdrop id uid - redis uid conflicts with keys gid - sshd uid conflicts with kmem gid - tcryptd uid conflicts with openldap gid - unifi uid conflicts with docker gid - uptimed uid conflicts with utmp gid - zope2 uid conflicts with connman gid - tomcat uid/gid mismatch
2015-03-08 20:35:04 +00:00
#libvirtd = 67; # unused
Update all legacy-style modules I.e., modules that use "require = [options]". Nowadays that should be written as { options = { ... }; config = { ... }; }; Also, use "imports" instead of "require" in places where we actually import another module.
2013-09-04 12:05:09 +01:00
graphite = 68;
nodePackages.statsd: remove The package/service is broken. Upstream is dead
2018-11-14 18:27:09 +00:00
#statsd = 69; # removed 2018-11-14
Update all legacy-style modules I.e., modules that use "require = [options]". Nowadays that should be written as { options = { ... }; config = { ... }; }; Also, use "imports" instead of "require" in places where we actually import another module.
2013-09-04 12:05:09 +01:00
transmission = 70;
postgres = 71;
nixos: resolve uid/gid conflicts This patch resolves all uid/gid conflicts except for nobody/nogroup (seems to make sense that these are the same). All conflicts where determined mechanically, but resolutions were manual. This patch also marks uids/gids with no corresponding group/user as "unused" (aka. reserved). Briefly, - tss group conflicts with dhcpcd The tss group id conflicts with dhcpcd: assign a new number and add a corresponding tss user. - elasticsearch uid conflicts with haproxy gid - resolve firebird/munin conflict - fix fourstorehttp{,d} typo - fix ghostOne typo: the service module refers to gids.ghostone, so use that in ids - memcached uid conflicts with users gid - nagios uid conflicts with disks gid - nscd uid conflicts with wheel gid - ntp uid conflicts with tty gid - resolve postfix/postdrop id uid - redis uid conflicts with keys gid - sshd uid conflicts with kmem gid - tcryptd uid conflicts with openldap gid - unifi uid conflicts with docker gid - uptimed uid conflicts with utmp gid - zope2 uid conflicts with connman gid - tomcat uid/gid mismatch
2015-03-08 20:35:04 +00:00
#vboxusers = 72; # unused
#vboxsf = 73; # unused
nixos/samba: remove services.samba.defaultShare option It's not that difficult to define shares using standard samba config file syntax, so why do we need the semi-configurable .defaultShare option? Also: * It uses /home/smbd and I think /home should be reserved for real human users. * If enabled, it breaks the assumption that .extraConfig continues in the [global] section. Without .defaultShare there is no need for the "smbguest" user and group either, mark them as unused.
2014-09-05 23:45:47 +01:00
smbguest = 74; # unused
Update all legacy-style modules I.e., modules that use "require = [options]". Nowadays that should be written as { options = { ... }; config = { ... }; }; Also, use "imports" instead of "require" in places where we actually import another module.
2013-09-04 12:05:09 +01:00
varnish = 75;
nixos: overhaul datadog module This overhauls the Datadog module a bit to be much more useful. In particular, it adds support for nginx and postgresql monitoring integrations to dd-agent. These have to exist in separate files under /etc/dd-agent, so the module just exposes then as separate options. In the future, more integrations could be added this way. In the process of doing this, I also had to rename the dd-agent user to datadog. Note the UIDs did not change, so this is strictly backwards compatible. The reason for this is to make it easier to create a 'datadog' postgres user with access to pg_stats, as 'dd-agent' typically isn't a valid username. This allows the out of the box configurations to be used. Signed-off-by: Austin Seipp <aseipp@pobox.com>
2014-05-02 06:43:27 +01:00
datadog = 76;
Update all legacy-style modules I.e., modules that use "require = [options]". Nowadays that should be written as { options = { ... }; config = { ... }; }; Also, use "imports" instead of "require" in places where we actually import another module.
2013-09-04 12:05:09 +01:00
lighttpd = 77;
lightdm = 78;
freenet = 79;
ircd = 80;
bacula = 81;
almir: also remove the corresponding module. The almir package was removed in 30291227f2411abaca097773eedb49b8f259e297 at about 2017-08 This module can no more be used without it.
2018-03-25 20:39:02 +01:00
#almir = 82; # removed 2018-03-25, the almir package was removed in 30291227f2411abaca097773eedb49b8f259e297 during 2017-08
Update all legacy-style modules I.e., modules that use "require = [options]". Nowadays that should be written as { options = { ... }; config = { ... }; }; Also, use "imports" instead of "require" in places where we actually import another module.
2013-09-04 12:05:09 +01:00
deluge = 83;
mysql = 84;
rabbitmq = 85;
activemq = 86;
gnunet = 87;
oidentd = 88;
quassel = 89;
amule = 90;
minidlna = 91;
elasticsearch = 92;
modules/misc/ids.nix: document the fact that the uid for tcpcryptd is hard-coded in the daemon
2013-09-17 10:22:31 +01:00
tcpcryptd = 93; # tcpcryptd uses a hard-coded uid. We patch it in Nixpkgs to match this choice.
firebird service many suggestions contributed by bjornfor and edolstra
2013-10-05 22:07:22 +01:00
firebird = 95;
nixos: resolve uid/gid conflicts This patch resolves all uid/gid conflicts except for nobody/nogroup (seems to make sense that these are the same). All conflicts where determined mechanically, but resolutions were manual. This patch also marks uids/gids with no corresponding group/user as "unused" (aka. reserved). Briefly, - tss group conflicts with dhcpcd The tss group id conflicts with dhcpcd: assign a new number and add a corresponding tss user. - elasticsearch uid conflicts with haproxy gid - resolve firebird/munin conflict - fix fourstorehttp{,d} typo - fix ghostOne typo: the service module refers to gids.ghostone, so use that in ids - memcached uid conflicts with users gid - nagios uid conflicts with disks gid - nscd uid conflicts with wheel gid - ntp uid conflicts with tty gid - resolve postfix/postdrop id uid - redis uid conflicts with keys gid - sshd uid conflicts with kmem gid - tcryptd uid conflicts with openldap gid - unifi uid conflicts with docker gid - uptimed uid conflicts with utmp gid - zope2 uid conflicts with connman gid - tomcat uid/gid mismatch
2015-03-08 20:35:04 +00:00
#keys = 96; # unused
nixos/haproxy: Revive the haproxy user and group Running haproxy with "DynamicUser = true" doesn't really work, since it prohibits specifying a TLS certificate bundle with limited permissions. This revives the haproxy user and group, but makes them dynamically allocated by NixOS, rather than statically allocated. It also adds options to specify which user and group haproxy runs as.
2020-03-11 18:52:37 +00:00
#haproxy = 97; # dynamically allocated as of 2020-03-11
nixos: define the primary group of users where needed
2021-08-08 13:00:00 +01:00
#mongodb = 98; #dynamically allocated as of 2021-09-03
nixos/openldap: switch to slapd.d configuration The old slapd.conf is deprecated. Replace with slapd.d, and use this opportunity to write some structured settings. Incidentally, this fixes the fact that openldap is reported up before any checks have completed, by using forking mode.
2020-08-02 23:52:37 +01:00
#openldap = 99; # dynamically allocated as of PR#94610
nixos: resolve uid/gid conflicts This patch resolves all uid/gid conflicts except for nobody/nogroup (seems to make sense that these are the same). All conflicts where determined mechanically, but resolutions were manual. This patch also marks uids/gids with no corresponding group/user as "unused" (aka. reserved). Briefly, - tss group conflicts with dhcpcd The tss group id conflicts with dhcpcd: assign a new number and add a corresponding tss user. - elasticsearch uid conflicts with haproxy gid - resolve firebird/munin conflict - fix fourstorehttp{,d} typo - fix ghostOne typo: the service module refers to gids.ghostone, so use that in ids - memcached uid conflicts with users gid - nagios uid conflicts with disks gid - nscd uid conflicts with wheel gid - ntp uid conflicts with tty gid - resolve postfix/postdrop id uid - redis uid conflicts with keys gid - sshd uid conflicts with kmem gid - tcryptd uid conflicts with openldap gid - unifi uid conflicts with docker gid - uptimed uid conflicts with utmp gid - zope2 uid conflicts with connman gid - tomcat uid/gid mismatch
2015-03-08 20:35:04 +00:00
#users = 100; # unused
nixos/cgminer: define group, fix eval after #133166
2021-09-17 13:00:00 +01:00
# cgminer = 101; #dynamically allocated as of 2021-09-17
nixos: add uid/gid for munin To be compatible with eb2f44c18cb6d300e965308547d8a4dea110f519 (Generate /etc/passwd and /etc/group at build time). Without this you'll get this: $ nixos-rebuild build [...] user-thrown exception: The option `users.extraGroups.unnamed-9.1.gid' is used but not defined.
2014-02-07 22:08:15 +00:00
munin = 102;
nixos/logcheck: define group, fix after #133166
2021-09-17 13:00:00 +01:00
#logcheck = 103; #dynamically allocated as of 2021-09-17
nixos: define the primary group of users where needed
2021-08-08 13:00:00 +01:00
#nix-ssh = 104; #dynamically allocated as of 2021-09-03
nixos: Assign uid/gid to dictd's service user.
2014-02-21 11:40:05 +00:00
dictd = 105;
couchdb: add ids
2014-02-27 13:33:30 +00:00
couchdb = 106;
nixos/ids: remove reserved searx ids
2020-10-27 13:10:33 +00:00
#searx = 107; # dynamically allocated as of 2020-10-27
kippo: cleanup the corresponding broken module.
2021-10-07 01:18:06 +01:00
#kippo = 108; # removed 2021-10-07, the kippo package was removed in 1b213f321cdbfcf868b96fd9959c24207ce1b66a during 2021-04
Add jenkins continuous integration server and user. By default the jenkins server is executed under the user "jenkins". Which can be configured using users.jenkins.* options. If a different user is requested by changing services.jenkins.user then none of the users.jenkins options apply. This patch does not include jenkins slave configuration. Some config options will probably change when this is implemented. Aspects like the user and environment are typically identical between slave and master. The service configs are different. The design is for users.jenkins to cover the shared aspects while services.jenkins and services.jenkins-slave cover the master and slave specific aspects, respectively. Another option would be to place everything under services.jenkins and have a config that selects master vs slave.
2014-02-10 20:07:12 +00:00
jenkins = 109;
Merge branch 'pkgs/systemd/journald_http_gateway' of git://github.com/offlinehacker/nixpkgs systemd: python support & journal http gateway Conflicts: nixos/modules/misc/ids.nix
2014-03-14 23:16:59 +00:00
systemd-journal-gateway = 110;
notbit: removed dead package The Bitmessage protocol v3 became mandatory on 16 Nov 2014 and notbit does not support it, nor has there been any activity in the project repository since then.
2016-01-07 03:34:31 +00:00
#notbit = 111; # unused
aerospike: init at 4.2.0.4 Co-authored-by: Volth <volth@webmaster.ms>
2018-07-16 01:40:53 +01:00
aerospike = 111;
nixos: define the primary group of users where needed
2021-08-08 13:00:00 +01:00
#ngircd = 112; #dynamically allocated as of 2021-09-03
nixos/btsync: remove Remove the btsync module. Bittorrent Sync was renamed to Resilio Sync in 2016, which is supported by the resilio module. Since Resilio Sync had some security updates since 2016, it is not safe to run Bittorrent Sync anymore.
2019-06-02 19:18:15 +01:00
#btsync = 113; # unused
nixos: define the primary group of users where needed
2021-08-08 13:00:00 +01:00
#minecraft = 114; #dynamically allocated as of 2021-09-03
vault: run as an unpivileged user
2017-06-27 15:54:25 +01:00
vault = 115;
nixos/rippled: define group, fix eval after #133166
2021-09-18 13:00:00 +01:00
# rippled = 116; #dynamically allocated as of 2021-09-18
Merge branch 'murmur' of git://github.com/thoughtpolice/nixpkgs nixos: add Murmur module (Mumble chat) Conflicts: nixos/modules/misc/ids.nix
2014-04-05 20:18:14 +01:00
murmur = 117;
nixos: reserve some uids/gids I have some NixOS modules that I keep out of tree, and having UIDs/GIDs reserved is quite helpful. Signed-off-by: Austin Seipp <aseipp@pobox.com>
2014-04-02 17:01:25 +01:00
foundationdb = 118;
newrelic = 119;
starbound = 120;
Allocate system uids/gids between 400 and 500 Previously it was between 100 and 500, but this can already collide with the static uids/guid in misc/ids.nix.
2014-04-29 09:45:06 +01:00
hydra = 122;
spiped = 123;
Add TeamSpeak 3 server & service module (close #2056) Conflicts (trivial): lib/maintainers.nix nixos/modules/misc/ids.nix
2014-03-29 00:40:30 +00:00
teamspeak = 124;
nixos: add influxdb module
2014-05-27 21:54:43 +01:00
influxdb = 125;
nsd-service: add service module for nsd
2014-06-12 10:20:43 +01:00
nsd = 126;
nixos: add gitolite module Signed-off-by: Austin Seipp <aseipp@pobox.com>
2014-06-26 04:32:45 +01:00
gitolite = 127;
Merge remote-tracking branch 'nixos/master' into feature/add-znc-module Conflicts: nixos/modules/misc/ids.nix
2014-07-03 17:30:11 +01:00
znc = 128;
polipo: new service expression
2014-07-15 15:16:58 +01:00
polipo = 129;
Add NixOS module for Mopidy, a music player daemon
2014-07-28 18:52:32 +01:00
mopidy = 130;
nixos: resolve uid/gid conflicts This patch resolves all uid/gid conflicts except for nobody/nogroup (seems to make sense that these are the same). All conflicts where determined mechanically, but resolutions were manual. This patch also marks uids/gids with no corresponding group/user as "unused" (aka. reserved). Briefly, - tss group conflicts with dhcpcd The tss group id conflicts with dhcpcd: assign a new number and add a corresponding tss user. - elasticsearch uid conflicts with haproxy gid - resolve firebird/munin conflict - fix fourstorehttp{,d} typo - fix ghostOne typo: the service module refers to gids.ghostone, so use that in ids - memcached uid conflicts with users gid - nagios uid conflicts with disks gid - nscd uid conflicts with wheel gid - ntp uid conflicts with tty gid - resolve postfix/postdrop id uid - redis uid conflicts with keys gid - sshd uid conflicts with kmem gid - tcryptd uid conflicts with openldap gid - unifi uid conflicts with docker gid - uptimed uid conflicts with utmp gid - zope2 uid conflicts with connman gid - tomcat uid/gid mismatch
2015-03-08 20:35:04 +00:00
#docker = 131; # unused
gdm: Add very experimental display manager
2014-04-02 17:21:00 +01:00
gdm = 132;
nixos: define the primary group of users where needed
2021-08-08 13:00:00 +01:00
#dhcpd = 133; # dynamically allocated as of 2021-09-03
siproxd: initial service expression
2014-07-10 19:08:38 +01:00
siproxd = 134;
Add mlmmj package and nixos module.
2014-07-08 23:43:26 +01:00
mlmmj = 135;
nixos: define the primary group of users where needed
2021-08-08 13:00:00 +01:00
#neo4j = 136;# dynamically allocated as of 2021-09-03
Add NixOS module for Riemann monitoring server.
2014-08-23 16:04:34 +01:00
riemann = 137;
Add NixOS module for the Riemann dashboard server
2014-08-23 16:39:45 +01:00
riemanndash = 138;
nixos: define the primary group of users where needed
2021-08-08 13:00:00 +01:00
#radvd = 139;# dynamically allocated as of 2021-09-03
#zookeeper = 140;# dynamically allocated as of 2021-09-03
#dnsmasq = 141;# dynamically allocated as of 2021-09-03
nixos: rewrite uhub module * Support for hosting multiple hubs * Using "settings" style configuration * Remove "uhub" user, use DynamicUser * Configuration reloading
2021-05-17 12:47:24 +01:00
#uhub = 142; # unused
nixos/ids: Add consul
2014-09-26 09:44:09 +01:00
yandexdisk = 143;
modules: add mxisd with test
2018-11-04 21:18:06 +00:00
mxisd = 144; # was once collectd
nixos: define the primary group of users where needed
2021-08-08 13:00:00 +01:00
#consul = 145;# dynamically allocated as of 2021-09-03
mailpile, nixos/mailpile: drop Still actively developed and yet stuck on python2. Also marked as vulnerable and their issue tracker contains yet another security issue reported in 2021/10 that the upstream hasn't acknowledged yet. Mind blown. Closes: #135543, #97274, #97275
2022-01-12 01:27:51 +00:00
#mailpile = 146; # removed 2022-01-12
nixos: add redmine service
2014-10-07 09:53:01 +01:00
redmine = 147;
seeks: remove, upstream unmaintained
2020-06-21 22:55:14 +01:00
#seeks = 148; # removed 2020-06-21
nixos: prosody was clashing with seeks unix ids
2014-10-20 16:22:01 +01:00
prosody = 149;
i2pd: added package, service
2014-11-09 08:44:47 +00:00
i2pd = 150;
nixos/systemd: provision a systemd-coredump user systemd-coredump tries to drop privileges to a systemd-coredump user if present (and falls back to the root user if it's not available). Create that user, and recycle uid 151 for it. We don't really care about the gid. Fixes https://github.com/NixOS/nixpkgs/issues/120803.
2021-07-29 13:55:57 +01:00
systemd-coredump = 151;
nixos/ids: Fix systemd ids
2014-11-19 23:01:44 +00:00
systemd-network = 152;
systemd-resolve = 153;
systemd-timesync = 154;
initial liquidsoap service expression
2014-11-20 22:30:24 +00:00
liquidsoap = 155;
nixos: define the primary group of users where needed
2021-08-08 13:00:00 +01:00
#etcd = 156;# dynamically allocated as of 2021-09-03
hbase: New package and NixOS module
2014-11-20 11:29:07 +00:00
hbase = 158;
opentsdb: New package and NixOS module
2014-11-20 12:00:53 +00:00
opentsdb = 159;
scollector: New NixOS module
2014-11-20 14:38:04 +00:00
scollector = 160;
Add a NixOS module to run bosun
2014-11-20 14:49:45 +00:00
bosun = 161;
nixos/kubernetes: fix user id
2014-11-29 15:46:39 +00:00
kubernetes = 162;
nixos: add peerflix module
2014-12-01 15:40:42 +00:00
peerflix = 163;
nixos/chronos: remove module The chronos package has been broken for > 9 months due to the breakage of the mesos package.
2020-08-15 15:36:22 +01:00
#chronos = 164; # removed 2020-08-15
nixos: Add gitlab and gitlab-shell I had to make several adjustments to make it work with nixos: * Replace relative config file lookups with ENV variable. * Modify gitlab-shell to not clear then environment when running pre-receive. * Modify gitlab-shell to write some environment variables into the .authorized_keys file to make sure gitlab-shell reads the correct config file. * Log unicorn output to syslog. I tried various ways of adding a syslog package but the bundler would not pick them up. Please fix in a better way if possible. * Gitlab-runner program wrapper. This is useful to run e.g. backups etc. with the correct environment set up.
2014-10-25 17:22:49 +01:00
gitlab = 165;
nixos/tox-bootstrapd: use DynamicUser
2021-09-15 17:35:12 +01:00
# tox-bootstrapd = 166; removed 2021-09-15
nixos: add cadvisor service
2014-12-28 19:21:41 +00:00
cadvisor = 167;
nixos: adding nylon service with uid,gid
2015-01-14 21:08:19 +00:00
nylon = 168;
nixos: define the primary group of users where needed
2021-08-08 13:00:00 +01:00
#apache-kafka = 169;# dynamically allocated as of 2021-09-03
panamax: remove packages, module and test was broken and depends on (deprecated) fleet packages: panamax_api, panamax_ui
2018-05-04 23:22:18 +01:00
#panamax = 170; # unused
exim: add version 4.85 incl. nixos module
2015-02-18 18:55:07 +00:00
exim = 172;
nixos: resolve uid/gid conflicts This patch resolves all uid/gid conflicts except for nobody/nogroup (seems to make sense that these are the same). All conflicts where determined mechanically, but resolutions were manual. This patch also marks uids/gids with no corresponding group/user as "unused" (aka. reserved). Briefly, - tss group conflicts with dhcpcd The tss group id conflicts with dhcpcd: assign a new number and add a corresponding tss user. - elasticsearch uid conflicts with haproxy gid - resolve firebird/munin conflict - fix fourstorehttp{,d} typo - fix ghostOne typo: the service module refers to gids.ghostone, so use that in ids - memcached uid conflicts with users gid - nagios uid conflicts with disks gid - nscd uid conflicts with wheel gid - ntp uid conflicts with tty gid - resolve postfix/postdrop id uid - redis uid conflicts with keys gid - sshd uid conflicts with kmem gid - tcryptd uid conflicts with openldap gid - unifi uid conflicts with docker gid - uptimed uid conflicts with utmp gid - zope2 uid conflicts with connman gid - tomcat uid/gid mismatch
2015-03-08 20:35:04 +00:00
#fleet = 173; # unused
#input = 174; # unused
nixos/sddm: add display manager
2015-03-02 17:58:35 +00:00
sddm = 175;
nixos/tcsd: make group uid dynamic
2021-09-19 20:42:46 +01:00
#tss = 176; # dynamically allocated as of 2021-09-17
nixos/memcached: make unix sockets usuable before: - /var/run/memcached is a bad default for a socket path, since its parent directory must be writeable by memcached. - Socket directory was not created by the module itself -> this was left as a burden to the user? - Having a static uid with a dynamic user name is not very useful. after: - Replace services.memcached.socket by a boolean flag. This simplifies our code, since we do not have to check if the user specifies a path with a parent directory that should be owned by memcached (/run/memcached/memcached.sock -> /run/memcached). - Remove fixed uid/gid allocation. The only file ever owned by the daemon is the socket that will be recreated on every start. Therefore user and group ids do not need to be static. - only create the memcached user, if the user has not specified a different one. The major use case for changing option is to allow existing services (such as php-fpm) opening the local unix socket. If we would unconditionally create a user that option would be useless.
2018-01-03 11:10:45 +00:00
#memcached = 177; removed 2018-01-03
nixos/openntpd, nixos/ntp: define group, fix after #133166
2021-09-17 13:00:00 +01:00
#ntp = 179; # dynamically allocated as of 2021-09-17
nixos: resolve uid/gid conflicts This patch resolves all uid/gid conflicts except for nobody/nogroup (seems to make sense that these are the same). All conflicts where determined mechanically, but resolutions were manual. This patch also marks uids/gids with no corresponding group/user as "unused" (aka. reserved). Briefly, - tss group conflicts with dhcpcd The tss group id conflicts with dhcpcd: assign a new number and add a corresponding tss user. - elasticsearch uid conflicts with haproxy gid - resolve firebird/munin conflict - fix fourstorehttp{,d} typo - fix ghostOne typo: the service module refers to gids.ghostone, so use that in ids - memcached uid conflicts with users gid - nagios uid conflicts with disks gid - nscd uid conflicts with wheel gid - ntp uid conflicts with tty gid - resolve postfix/postdrop id uid - redis uid conflicts with keys gid - sshd uid conflicts with kmem gid - tcryptd uid conflicts with openldap gid - unifi uid conflicts with docker gid - uptimed uid conflicts with utmp gid - zope2 uid conflicts with connman gid - tomcat uid/gid mismatch
2015-03-08 20:35:04 +00:00
zabbix = 180;
nixos/redis: remove static uid/gid assignment all files are chowned on startup
2018-01-03 10:15:47 +00:00
#redis = 181; removed 2018-01-03
nixos/unifi: define group, fix after #133166
2021-09-17 13:00:00 +01:00
#unifi = 183; dynamically allocated as of 2021-09-17
nixos: resolve uid/gid conflicts This patch resolves all uid/gid conflicts except for nobody/nogroup (seems to make sense that these are the same). All conflicts where determined mechanically, but resolutions were manual. This patch also marks uids/gids with no corresponding group/user as "unused" (aka. reserved). Briefly, - tss group conflicts with dhcpcd The tss group id conflicts with dhcpcd: assign a new number and add a corresponding tss user. - elasticsearch uid conflicts with haproxy gid - resolve firebird/munin conflict - fix fourstorehttp{,d} typo - fix ghostOne typo: the service module refers to gids.ghostone, so use that in ids - memcached uid conflicts with users gid - nagios uid conflicts with disks gid - nscd uid conflicts with wheel gid - ntp uid conflicts with tty gid - resolve postfix/postdrop id uid - redis uid conflicts with keys gid - sshd uid conflicts with kmem gid - tcryptd uid conflicts with openldap gid - unifi uid conflicts with docker gid - uptimed uid conflicts with utmp gid - zope2 uid conflicts with connman gid - tomcat uid/gid mismatch
2015-03-08 20:35:04 +00:00
uptimed = 184;
nixos/zope2: define group untested as the module is broken (attribute 'modules' missing)
2021-09-18 13:00:00 +01:00
#zope2 = 185; # dynamically allocated as of 2021-09-18
nixos/ripple-data-api: define group required after #133166 untested, the module is broken by the removal of couchdb
2021-09-18 13:00:00 +01:00
#ripple-data-api = 186; dynamically allocated as of 2021-09-17
Add MediaTomb service
2015-03-27 10:48:50 +00:00
mediatomb = 187;
nixos/rdnssd: define group; fix after #133166
2021-09-18 13:00:00 +01:00
#rdnssd = 188; #dynamically allocated as of 2021-09-18
ihaskell: re-enable
2017-11-06 06:29:56 +00:00
ihaskell = 189;
i2p: add nixos service
2015-04-15 11:52:06 +01:00
i2p = 190;
lambdabot: add nixos service
2015-04-14 00:06:37 +01:00
lambdabot = 191;
Added NixOS module for Asterisk server
2015-04-16 23:53:26 +01:00
asterisk = 192;
plex: init at 0.9.11.16.958 Added a package and module for Plex Media Server, an application for managing media collections across multiple devices.
2015-04-16 19:15:59 +01:00
plex = 193;
plexpy: add user id
2017-10-30 12:13:58 +00:00
plexpy = 195;
nixos: add grafana module
2015-04-25 15:02:44 +01:00
grafana = 196;
Add skydns module
2015-06-08 12:36:05 +01:00
skydns = 197;
ripple-rest: remove marked as broken for > 1 yr, development is frozen and author recommends moving to https://github.com/ripple/ripple-lib
2017-08-12 12:38:32 +01:00
# ripple-rest = 198; # unused, removed 2017-08-12
nixos/nix-serve: don't run as nogroup nogroup is insecure if shared
2020-12-12 08:29:40 +00:00
# nix-serve = 199; # unused, removed 2020-12-12
nixos/tvheadend: define group, fix eval after #133166
2021-09-18 13:00:00 +01:00
#tvheadend = 200; # dynamically allocated as of 2021-09-18
uwsgi-service: Add user/group for uwsgi service. Also add a uwsgi directory under /run (defaulting to /run/uwsgi) where the uwsgi user can place sockets.
2015-06-24 15:42:43 +01:00
uwsgi = 201;
nixos: added gitit service
2015-06-08 23:11:24 +01:00
gitit = 202;
Merge remote-tracking branch 'projectorhq/riemann-tools' Add riemann-tools package and service
2015-07-01 13:44:38 +01:00
riemanntools = 203;
subsonic service: init Add a systemd service and UID/GID for the Subsonic personal media streamer server (<http://subsonic.org>).
2015-07-04 01:42:16 +01:00
subsonic = 204;
riak, nixos/riak: remove Riak have been updated a lot since the version 2.2 (now 3.0.10) but has seen no updated to the package. This is at this point a problem forcing us to maintain old versions of erlang. We would be happy to re accept a newer version of Riak if someone want to spend the time to set it up.
2022-06-22 13:14:08 +01:00
# riak = 205; # unused, remove 2022-07-22
nixos/shout: define group, fix eval after #133166
2021-09-18 13:00:00 +01:00
#shout = 206; # dynamically allocated as of 2021-09-18
GateOne: init at 1.2
2015-07-31 05:22:44 +01:00
gateone = 207;
namecoind nixos module: init
2015-09-08 18:24:40 +01:00
namecoin = 208;
nixos/lxd: Add service
2015-09-14 07:27:31 +01:00
#lxd = 210; # unused
nixos: define the primary group of users where needed
2021-08-08 13:00:00 +01:00
#kibana = 211;# dynamically allocated as of 2021-09-03
xtreemfs: add nixos module
2015-09-13 13:49:19 +01:00
xtreemfs = 212;
calibre-server service: init
2015-09-28 04:31:17 +01:00
calibre-server = 213;
nixos/heapster: define group, fix after #133166
2021-09-17 13:00:00 +01:00
#heapster = 214; #dynamically allocated as of 2021-09-17
services/misc/bepasty: init at 2015-10-21 This module implements a way to start one or more bepasty servers. It supports configuring the listen address of gunicorn and how bepasty behaves internally. Configuring multiple bepasty servers provides a way to serve pastes externally without authentication and provide creating,listing,deleting pastes interally. nginx can be used to provide access via hostname + listen address. `configuration.nix`: services.bepasty = { enable = true; servers = { internal = { defaultPermissions = "admin,list,create,read,delete"; secretKey = "secret"; bind = "127.0.0.1:8000"; }; external = { defaultPermissions = "read"; bind = "127.0.0.1:8001"; secretKey = "another-secret"; }; }; };
2015-10-21 13:45:27 +01:00
bepasty = 215;
nixos/pump.io: remove This would probably be better maintained in a separate repo as an external NixOS module which gets imported into user's configuration.
2018-02-24 08:44:27 +00:00
# pumpio = 216; # unused, removed 2018-02-24
networkmanager: set uid/gid for the networkmanager openvpn agent Fixes #11317
2015-12-08 16:46:57 +00:00
nm-openvpn = 217;
nixos/mathics: remove module
2020-08-15 15:19:17 +01:00
# mathics = 218; # unused, removed 2020-08-15
nixos/ejabberd: update service
2016-01-03 02:36:19 +00:00
ejabberd = 219;
nixos/postsrsd: add module
2016-01-06 03:04:50 +00:00
postsrsd = 220;
nixos/opendkim: add module
2016-01-06 22:10:56 +00:00
opendkim = 221;
nixos/dspam: add module
2016-01-07 01:17:42 +00:00
dspam = 222;
nixos/gale: remove This should have been removed along the package in 3f7d959.
2021-06-10 01:33:10 +01:00
# gale = 223; removed 2021-06-10
matrix-synapse: init at 0.12.0
2016-01-08 14:12:00 +00:00
matrix-synapse = 224;
nixos: Add module for rspamd
2016-01-12 09:06:46 +00:00
rspamd = 225;
rmilter: remove deprecated package (and module)
2019-08-23 14:24:35 +01:00
# rmilter = 226; # unused, removed 2019-08-22
cfdyndns: init at 0.0.1
2016-01-17 12:11:09 +00:00
cfdyndns = 227;
nixos/gammu-smsd: define group, fix after #133166
2021-09-17 13:00:00 +01:00
# gammu-smsd = 228; #dynamically allocated as of 2021-09-17
Merge branch 'pdnsd-service' of https://github.com/nfjinjing/nixpkgs Closes #12932
2016-02-16 17:35:01 +00:00
pdnsd = 229;
octoprint service: init
2016-02-14 11:58:09 +00:00
octoprint = 230;
networkmanager: fix link-local ip addresses NetworkManager needs an additional avahi-user to use link-local IPv4 (and probably IPv6) addresses. avahi-autoipd also needs to be patched to the right path.
2016-02-26 02:28:56 +00:00
avahi-autoipd = 231;
nixos/nntp-proxy: define group, fix after #133166
2021-09-17 13:00:00 +01:00
# nntp-proxy = 232; #dynamically allocated as of 2021-09-17
mjpg-streamer service: init
2016-03-12 14:38:13 +00:00
mjpg-streamer = 233;
nixos: define the primary group of users where needed
2021-08-08 13:00:00 +01:00
#radicale = 234;# dynamically allocated as of 2021-09-03
Pin hydra-www and hydra-queue-runner uids hydra user is already pinned, this is needed due to https://github.com/NixOS/nixpkgs/issues/14148 (cherry picked from commit 0858ece1ad0bd281d2332c40f9fd08005e04a3c5) Signed-off-by: Domen Kožar <domen@dev.si>
2016-03-23 12:14:31 +00:00
hydra-queue-runner = 235;
hydra-www = 236;
syncthing: run daemon with dedicated user as default
2016-04-01 00:26:52 +01:00
syncthing = 237;
caddy service: initial implementation
2016-04-05 02:30:21 +01:00
caddy = 239;
Merge pull request #14476 (taskserver) This adds a Taskserver module along with documentation and a small helper tool which eases managing a custom CA along with Taskserver organisations, users and groups. Taskserver is the server component of Taskwarrior, a TODO list application for the command line. The work has been started by @matthiasbeyer back in mid 2015 and I have continued to work on it recently, so this merge contains commits from both of us. Thanks particularly to @nbp and @matthiasbeyer for reviewing and suggesting improvements. I've tested this with the new test (nixos/tests/taskserver.nix) this branch adds and it fails because of the changes introduced by the closure-size branch, so we need to do additional work on base of this.
2016-04-14 23:09:23 +01:00
taskd = 240;
nixos/factorio: sandbox service using systemd - DynamicUser enabled instead of static uid/gid - Enables most sandboxing options systemd offers
2019-05-01 20:56:58 +01:00
# factorio = 241; # DynamicUser = true
emby: Drop package and module and refer to jellyfin
2019-05-01 12:19:30 +01:00
# emby = 242; # unusued, removed 2019-05-01
nixos: define the primary group of users where needed
2021-08-08 13:00:00 +01:00
#graylog = 243;# dynamically allocated as of 2021-09-03
sniproxy service: init
2016-05-11 05:18:38 +01:00
sniproxy = 244;
nzbget: 16.4 -> 17.0-r1686 and nzbget service
2016-05-04 09:58:01 +01:00
nzbget = 245;
mosquitto service: init Initial Mosquitto MQTT Broker service file.
2016-05-22 15:07:26 +01:00
mosquitto = 246;
nixos/toxvpn: define group, fix eval after #133166
2021-09-18 13:00:00 +01:00
#toxvpn = 247; # dynamically allocated as of 2021-09-18
nixos squeezelite: run using DynamicUser
2018-03-29 09:59:00 +01:00
# squeezelite = 248; # DynamicUser = true
coturn: init at 4.5.0.3 (#16284)
2016-06-21 11:59:29 +01:00
turnserver = 249;
nixos: define the primary group of users where needed
2021-08-08 13:00:00 +01:00
#smokeping = 250;# dynamically allocated as of 2021-09-03
Add gocd agent and server service packages (#16273) GoCD is an open source continuous delivery server specializing in advanced workflow modeling and visualization. Update maintainers list to include swarren83. Update module list to include gocd agent and server module. Update packages list to include gocd agent and server package. Update version, revision and checksum for GoCD release 16.5.0.
2016-07-22 23:29:18 +01:00
gocd-agent = 251;
gocd-server = 252;
Add Terraria server service (#16832)
2016-08-07 02:58:38 +01:00
terraria = 253;
mattermost service: init
2016-08-15 02:17:53 +01:00
mattermost = 254;
prometheus service: add This is based on @benleys work: https://github.com/NixOS/nixpkgs/pull/8216 I updated changed the user and group ids.
2015-06-08 07:36:56 +01:00
prometheus = 255;
telegraf: init at 1.0.0 Signed-off-by: Jörg Thalheim <joerg@higgsboson.tk>
2016-09-08 14:30:20 +01:00
telegraf = 256;
gitlab-runner service: initial version
2016-09-17 12:08:18 +01:00
gitlab-runner = 257;
postgrey: init at 1.36 (includes service)
2015-11-17 17:30:10 +00:00
postgrey = 258;
hound: init module
2016-10-12 23:58:56 +01:00
hound = 259;
leaps: 0.5.1 + add a service + test
2016-11-06 09:33:21 +00:00
leaps = 260;
services: Add Interplanetary File System service Signed-off-by: Maximilian Güntner <code@klandest.in>
2016-10-30 19:39:53 +00:00
ipfs = 261;
riak-cs: delete
2020-10-14 13:59:42 +01:00
# stanchion = 262; # unused, removed 2020-10-14
# riak-cs = 263; # unused, removed 2020-10-14
infinoted service: init Service module for the dedicated gobby server included in libinfinity
2016-11-27 16:23:21 +00:00
infinoted = 264;
Add sickbeard module (with SickGear & SickRage)
2018-09-16 20:54:16 +01:00
sickbeard = 265;
headphones: init at 0.5.19
2018-09-16 20:47:47 +01:00
headphones = 266;
couchpotato, nixos/couchpotato: remove Using python2 and abadoned upstream in 2020, last release in 2015.
2022-01-02 01:17:29 +00:00
# couchpotato = 267; # unused, removed 2022-01-01
gogs service: init
2016-10-09 18:04:42 +01:00
gogs = 268;
nixos/pdns-recursor: declare module user as system user
2020-10-17 22:59:45 +01:00
#pdns-recursor = 269; # dynamically allocated as of 2020-20-18
Revert "Revert "Merge master into staging-next"" In 87a19e9048773d5a363679617406ad148d36c3b8 I merged staging-next into master using the GitHub gui as intended. In ac241fb7a570d6cf81d229ad22a8889602639160 I merged master into staging-next for the next staging cycle, however, I accidentally pushed it to master. Thinking this may cause trouble, I reverted it in 0be87c79797a5fa384fbc356c74ed54f9f7829ea. This was however wrong, as it "removed" master. This reverts commit 0be87c79797a5fa384fbc356c74ed54f9f7829ea.
2020-02-05 18:27:16 +00:00
#kresd = 270; # switched to "knot-resolver" with dynamic ID
rpcbind service: use upstream systemd unit
2017-01-29 17:06:17 +00:00
rpc = 271;
nixos/geoipupdate: Replace the old `geoip-updater` module Our old bespoke GeoIP updater doesn't seem to be working anymore. Instead of trying to fix it, replace it with the official updater from MaxMind.
2021-04-28 15:56:06 +01:00
#geoip = 272; # new module uses DynamicUser
fcron: 3.1.2 -> 3.2.1 fixes #23320 #23413
2017-03-05 21:40:01 +00:00
fcron = 273;
nixos: static ids for jackett, radarr, sonarr
2017-04-22 08:44:12 +01:00
sonarr = 274;
radarr = 275;
jackett = 276;
Merge branch 'master' into aria2.service
2017-04-27 15:50:13 +01:00
aria2 = 277;
Merge branch 'master' into clickhouse
2017-05-01 06:33:31 +01:00
clickhouse = 278;
resilio service: replaces btsync service, which is no longer supported upstream.
2017-06-01 15:50:17 +01:00
rslsync = 279;
minio service: add inital service features: - change listen port and address - configure config and data directory - basic test to check if minio server starts
2017-06-25 17:43:10 +01:00
minio = 280;
Reserve uid/gids for kanboard
2017-10-09 12:44:32 +01:00
kanboard = 281;
nixos pykms: run via DynamicUser
2018-03-26 08:16:22 +01:00
# pykms = 282; # DynamicUser = true
nixos user: reserve kodi
2017-10-13 03:34:27 +01:00
kodi = 283;
ixos ids: reserve restya-board
2017-11-22 11:11:46 +00:00
restya-board = 284;
nixos/mighttpd2: init
2018-01-04 17:19:54 +00:00
mighttpd2 = 285;
home-assistant: add NixOS module
2018-01-23 09:51:13 +00:00
hass = 286;
nixos/monero: use isSystemUser = true
2021-05-05 13:47:46 +01:00
#monero = 287; # dynamically allocated as of 2021-05-08
nixos/ceph: init module (#35299) All 5 daemon types can be enabled and configured through the module and the module both creates the ceph.conf required but also creates and enables specific services for each daemon, based on the systemd service files that upstream provides.
2018-03-01 11:47:13 +00:00
ceph = 288;
duplicati: create service
2018-04-07 20:23:04 +01:00
duplicati = 289;
nixos/monetdb: init (#39812)
2018-05-01 15:44:12 +01:00
monetdb = 290;
restic-rest-server module: init
2018-05-03 20:30:06 +01:00
restic = 291;
ids: assing openvpn
2018-05-26 04:11:48 +01:00
openvpn = 292;
meguca: remove (#95920)
2020-08-21 21:00:40 +01:00
# meguca = 293; # removed 2020-08-21
nixos/hadoop: add hadoop module (hdfs, yarn)
2018-05-21 02:09:31 +01:00
yarn = 294;
hdfs = 295;
mapred = 296;
hadoop = 297;
nixos/hydron: init
2018-07-11 00:10:02 +01:00
hydron = 298;
nixos/cfssl: init - based on module originally written by @srhb - complies with available options in cfssl v1.3.2 - uid and gid 299 reserved in ids.nix - added simple nixos test case
2018-07-26 15:25:34 +01:00
cfssl = 299;
cassandra: rewrote service from scratch Adds a replacement for the previously broken `services.database.cassandra` with tests for a multi-node setup.
2017-11-07 13:11:56 +00:00
cassandra = 300;
nixos/libvirtd: add option to run qemu as non-root New option virtualisation.libvirtd.qemuRunAsRoot (default: true). If false, qemu is run as non-privileged user qemu-libvirtd, reducing security risk
2018-03-17 23:22:53 +00:00
qemu-libvirtd = 301;
systemd: added groups kvm, render they need to exist according to the README of systemd
2018-08-15 21:10:31 +01:00
# kvm = 302; # unused
# render = 303; # unused
nixos/zeronet: remove static uid and gid
2019-10-03 07:25:08 +01:00
# zeronet = 304; # removed 2019-01-03
initial NixOS module for LIRC
2017-11-25 21:41:19 +00:00
lirc = 305;
lidarr: init at 0.3.1.471 Fork of sonarr (as radarr) but for music instead of series and movies.
2018-09-09 11:10:04 +01:00
lidarr = 306;
nixos/slurm: run ctld as user and fix spool dir * run as user 'slurm' per default instead of root * add user/group slurm to ids.nix * fix default location for the state dir of slurmctld: (/var/spool -> /var/spool/slurmctld) * Update release notes with the above changes
2018-10-23 22:43:53 +01:00
slurm = 307;
nixos/kapacitor: new service
2018-11-01 20:52:17 +00:00
kapacitor = 308;
solr: 4.10.3 -> 7.5.0, refactor service to reflect major changes in version bump, NixOS test included
2018-11-03 17:14:13 +00:00
solr = 309;
nixos/alerta: create new module + add kapacitor integration
2018-11-08 21:34:23 +00:00
alerta = 310;
nixos/minetest fix: add missing uid/gid for minetest
2018-11-11 11:41:27 +00:00
minetest = 311;
rss2email module: init Also adding `system-sendmail` package for sharing the code with other modules or packages needing it.
2018-10-27 10:33:43 +01:00
rss2email = 312;
nixos/cockroachdb: create new service This also includes a full end-to-end CockroachDB clustering test to ensure everything basically works. However, this test is not currently enabled by default, though it can be run manually. See the included comments in the test for more information. Closes #51306. Closes #38665. Co-authored-by: Austin Seipp <aseipp@pobox.com> Signed-off-by: Austin Seipp <aseipp@pobox.com>
2018-04-10 02:16:33 +01:00
cockroachdb = 313;
zoneminder: add user for NixOS
2019-01-09 02:58:32 +00:00
zoneminder = 314;
paperless service: init
2019-01-27 14:26:31 +00:00
paperless = 315;
nixos/mailman: don't reserve a static uid in the system Any system uid will do, so we let the system allocate one for us. The 'mailman' group is gone entirely since we don't need it. Users who wish to run the 'mailman' administration utility can do so via 'sudo': $ sudo -u mailman mailman info Also, simplify the syntax of our user.users entry to rely on an attribute set rather than a list.
2019-08-30 16:55:59 +01:00
#mailman = 316; # removed 2019-08-30
nixos/zigbee2mqtt: init
2019-10-27 17:28:53 +00:00
zigbee2mqtt = 317;
nixos/update-users-groups: /etc/shadow owned by root:shadow
2020-09-24 21:28:52 +01:00
# shadow = 318; # unused
nixos/hqplayerd: init
2021-06-13 23:59:13 +01:00
hqplayer = 319;
nixos/moonraker: init
2021-07-21 03:21:03 +01:00
moonraker = 320;
nixos/distccd: init Closes: #42604
2021-08-22 05:59:17 +01:00
distcc = 321;
nixos/webdav-server-rs: init
2021-11-21 05:04:06 +00:00
webdav = 322;
nixos/pipewire: add systemWide option
2022-01-03 20:05:30 +00:00
pipewire = 323;
nixos/rstudio-server: init
2021-12-23 00:43:58 +00:00
rstudio-server = 324;
nixos/localtimed: fix service
2022-08-13 03:23:20 +01:00
localtimed = 325;
panamax: new package and service
2014-12-08 09:02:57 +00:00
Allocate system uids/gids between 400 and 500 Previously it was between 100 and 500, but this can already collide with the static uids/guid in misc/ids.nix.
2014-04-29 09:45:06 +01:00
# When adding a uid, make sure it doesn't match an existing gid. And don't use uids above 399!
Add support for the Avahi daemon. The daemon starts correctly but, for some reason, clients fail to connect to it. svn path=/nixos/trunk/; revision=10999
2008-03-06 17:11:22 +00:00
Update all legacy-style modules I.e., modules that use "require = [options]". Nowadays that should be written as { options = { ... }; config = { ... }; }; Also, use "imports" instead of "require" in places where we actually import another module.
2013-09-04 12:05:09 +01:00
nixbld = 30000; # start of range of uids
nobody = 65534;
};
ids.gids = {
root = 0;
wheel = 1;
kmem = 2;
tty = 3;
messagebus = 4; # D-Bus
haldaemon = 5;
disk = 6;
nixos/vsftpd: allocate group; fix fallout of #133166
2021-09-14 13:00:00 +01:00
#vsftpd = 7; # dynamically allocated as of 2021-09-14
Update all legacy-style modules I.e., modules that use "require = [options]". Nowadays that should be written as { options = { ... }; config = { ... }; }; Also, use "imports" instead of "require" in places where we actually import another module.
2013-09-04 12:05:09 +01:00
ftp = 8;
nixos/bitlbee: switched to systemd DynamicUser
2021-09-30 08:54:49 +01:00
# bitlbee = 9; # removed 2021-10-05 #139765
nixos/ids: remove avahi uid/gid
2019-05-22 21:01:55 +01:00
#avahi = 10; # removed 2019-05-22
nixos: resolve uid/gid conflicts This patch resolves all uid/gid conflicts except for nobody/nogroup (seems to make sense that these are the same). All conflicts where determined mechanically, but resolutions were manual. This patch also marks uids/gids with no corresponding group/user as "unused" (aka. reserved). Briefly, - tss group conflicts with dhcpcd The tss group id conflicts with dhcpcd: assign a new number and add a corresponding tss user. - elasticsearch uid conflicts with haproxy gid - resolve firebird/munin conflict - fix fourstorehttp{,d} typo - fix ghostOne typo: the service module refers to gids.ghostone, so use that in ids - memcached uid conflicts with users gid - nagios uid conflicts with disks gid - nscd uid conflicts with wheel gid - ntp uid conflicts with tty gid - resolve postfix/postdrop id uid - redis uid conflicts with keys gid - sshd uid conflicts with kmem gid - tcryptd uid conflicts with openldap gid - unifi uid conflicts with docker gid - uptimed uid conflicts with utmp gid - zope2 uid conflicts with connman gid - tomcat uid/gid mismatch
2015-03-08 20:35:04 +00:00
#nagios = 11; # unused
Update all legacy-style modules I.e., modules that use "require = [options]". Nowadays that should be written as { options = { ... }; config = { ... }; }; Also, use "imports" instead of "require" in places where we actually import another module.
2013-09-04 12:05:09 +01:00
atd = 12;
postfix = 13;
postdrop = 14;
dovecot = 15;
nixos: resolve uid/gid conflicts This patch resolves all uid/gid conflicts except for nobody/nogroup (seems to make sense that these are the same). All conflicts where determined mechanically, but resolutions were manual. This patch also marks uids/gids with no corresponding group/user as "unused" (aka. reserved). Briefly, - tss group conflicts with dhcpcd The tss group id conflicts with dhcpcd: assign a new number and add a corresponding tss user. - elasticsearch uid conflicts with haproxy gid - resolve firebird/munin conflict - fix fourstorehttp{,d} typo - fix ghostOne typo: the service module refers to gids.ghostone, so use that in ids - memcached uid conflicts with users gid - nagios uid conflicts with disks gid - nscd uid conflicts with wheel gid - ntp uid conflicts with tty gid - resolve postfix/postdrop id uid - redis uid conflicts with keys gid - sshd uid conflicts with kmem gid - tcryptd uid conflicts with openldap gid - unifi uid conflicts with docker gid - uptimed uid conflicts with utmp gid - zope2 uid conflicts with connman gid - tomcat uid/gid mismatch
2015-03-08 20:35:04 +00:00
tomcat = 16;
Update all legacy-style modules I.e., modules that use "require = [options]". Nowadays that should be written as { options = { ... }; config = { ... }; }; Also, use "imports" instead of "require" in places where we actually import another module.
2013-09-04 12:05:09 +01:00
audio = 17;
floppy = 18;
uucp = 19;
lp = 20;
nixos: add optional process information hiding This module adds an option `security.hideProcessInformation` that, when enabled, restricts access to process information such as command-line arguments to the process owner. The module adds a static group "proc" whose members are exempt from process information hiding. Ideally, this feature would be implemented by simply adding the appropriate mount options to `fileSystems."/proc".fsOptions`, but this was found to not work in vmtests. To ensure that process information hiding is enforced, we use a systemd service unit that remounts `/proc` after `systemd-remount-fs.service` has completed. To verify the correctness of the feature, simple tests were added to nixos/tests/misc: the test ensures that unprivileged users cannot see process information owned by another user, while members of "proc" CAN. Thanks to @abbradar for feedback and suggestions.
2016-04-09 19:22:16 +01:00
proc = 21;
Update all legacy-style modules I.e., modules that use "require = [options]". Nowadays that should be written as { options = { ... }; config = { ... }; }; Also, use "imports" instead of "require" in places where we actually import another module.
2013-09-04 12:05:09 +01:00
pulseaudio = 22; # must match `pulseaudio' UID
gpsd = 23;
cdrom = 24;
tape = 25;
video = 26;
dialout = 27;
polkit: major update 0.105 -> 0.112 - It now uses JavaScript for configuration (only), so I had to "convert" config for NetworkManager. - I tested suspend/restart/(un)mount on KDE/Xfce, Phreedom tested NetworkManager config conversion.
2013-11-09 15:29:18 +00:00
#polkituser = 28; # currently unused, polkitd doesn't need a group
Update all legacy-style modules I.e., modules that use "require = [options]". Nowadays that should be written as { options = { ... }; config = { ... }; }; Also, use "imports" instead of "require" in places where we actually import another module.
2013-09-04 12:05:09 +01:00
utmp = 29;
nixos ddclient: support multiple domains and run via systemd timer a) Some providers can update multiple domains - support that. b) Make "zone" and "script" configurable. Some providers require these. c) Instead of leaving the ddclient daemon running all the time, use a systemd timer to kick it off. d) Don't use a predefined user - run everything via DynamicUser e) Add documentation
2018-03-12 15:25:28 +00:00
# ddclient = 30; # converted to DynamicUser = true
Update all legacy-style modules I.e., modules that use "require = [options]". Nowadays that should be written as { options = { ... }; config = { ... }; }; Also, use "imports" instead of "require" in places where we actually import another module.
2013-09-04 12:05:09 +01:00
davfs2 = 31;
Revert "nixos/dysnomia nixos/disnix: Drop modules" This reverts commit a3f4db8679002e20cc33576b5ba80996cc7a3398.
2021-03-28 16:46:10 +01:00
disnix = 33;
Update all legacy-style modules I.e., modules that use "require = [options]". Nowadays that should be written as { options = { ... }; config = { ... }; }; Also, use "imports" instead of "require" in places where we actually import another module.
2013-09-04 12:05:09 +01:00
osgi = 34;
nixos: overhaul Tor module This overhauls the Tor module in a few ways: - Uses systemd service files, including hardening/config checks - Removed old privoxy support; users should use the Tor Browser instead. - Remove 'fast' circuit/SOCKS port; most users don't care (and it adds added complexity and confusion) - Added support for bandwidth accounting - Removed old relay listenAddress option; taken over by portSpec - Formatting, description, code cleanups. Signed-off-by: Austin Seipp <aseipp@pobox.com>
2014-12-06 09:37:31 +00:00
tor = 35;
nixos: resolve uid/gid conflicts This patch resolves all uid/gid conflicts except for nobody/nogroup (seems to make sense that these are the same). All conflicts where determined mechanically, but resolutions were manual. This patch also marks uids/gids with no corresponding group/user as "unused" (aka. reserved). Briefly, - tss group conflicts with dhcpcd The tss group id conflicts with dhcpcd: assign a new number and add a corresponding tss user. - elasticsearch uid conflicts with haproxy gid - resolve firebird/munin conflict - fix fourstorehttp{,d} typo - fix ghostOne typo: the service module refers to gids.ghostone, so use that in ids - memcached uid conflicts with users gid - nagios uid conflicts with disks gid - nscd uid conflicts with wheel gid - ntp uid conflicts with tty gid - resolve postfix/postdrop id uid - redis uid conflicts with keys gid - sshd uid conflicts with kmem gid - tcryptd uid conflicts with openldap gid - unifi uid conflicts with docker gid - uptimed uid conflicts with utmp gid - zope2 uid conflicts with connman gid - tomcat uid/gid mismatch
2015-03-08 20:35:04 +00:00
#cups = 36; # unused
#foldingathome = 37; # unused
#sabnzd = 38; # unused
kdm: drop service
2017-02-11 18:55:09 +00:00
#kdm = 39; # unused, even before 17.03
ghostOne: remove broken and unmaintained
2017-12-27 14:28:11 +00:00
#ghostone = 40; # dropped in 18.03
Update all legacy-style modules I.e., modules that use "require = [options]". Nowadays that should be written as { options = { ... }; config = { ... }; }; Also, use "imports" instead of "require" in places where we actually import another module.
2013-09-04 12:05:09 +01:00
git = 41;
Fix some uid/gid attributes to match the actual user/group name
2014-04-29 09:51:42 +01:00
fourstore = 42;
nixos: resolve uid/gid conflicts This patch resolves all uid/gid conflicts except for nobody/nogroup (seems to make sense that these are the same). All conflicts where determined mechanically, but resolutions were manual. This patch also marks uids/gids with no corresponding group/user as "unused" (aka. reserved). Briefly, - tss group conflicts with dhcpcd The tss group id conflicts with dhcpcd: assign a new number and add a corresponding tss user. - elasticsearch uid conflicts with haproxy gid - resolve firebird/munin conflict - fix fourstorehttp{,d} typo - fix ghostOne typo: the service module refers to gids.ghostone, so use that in ids - memcached uid conflicts with users gid - nagios uid conflicts with disks gid - nscd uid conflicts with wheel gid - ntp uid conflicts with tty gid - resolve postfix/postdrop id uid - redis uid conflicts with keys gid - sshd uid conflicts with kmem gid - tcryptd uid conflicts with openldap gid - unifi uid conflicts with docker gid - uptimed uid conflicts with utmp gid - zope2 uid conflicts with connman gid - tomcat uid/gid mismatch
2015-03-08 20:35:04 +00:00
fourstorehttp = 43;
Update all legacy-style modules I.e., modules that use "require = [options]". Nowadays that should be written as { options = { ... }; config = { ... }; }; Also, use "imports" instead of "require" in places where we actually import another module.
2013-09-04 12:05:09 +01:00
virtuoso = 44;
nixos: resolve uid/gid conflicts This patch resolves all uid/gid conflicts except for nobody/nogroup (seems to make sense that these are the same). All conflicts where determined mechanically, but resolutions were manual. This patch also marks uids/gids with no corresponding group/user as "unused" (aka. reserved). Briefly, - tss group conflicts with dhcpcd The tss group id conflicts with dhcpcd: assign a new number and add a corresponding tss user. - elasticsearch uid conflicts with haproxy gid - resolve firebird/munin conflict - fix fourstorehttp{,d} typo - fix ghostOne typo: the service module refers to gids.ghostone, so use that in ids - memcached uid conflicts with users gid - nagios uid conflicts with disks gid - nscd uid conflicts with wheel gid - ntp uid conflicts with tty gid - resolve postfix/postdrop id uid - redis uid conflicts with keys gid - sshd uid conflicts with kmem gid - tcryptd uid conflicts with openldap gid - unifi uid conflicts with docker gid - uptimed uid conflicts with utmp gid - zope2 uid conflicts with connman gid - tomcat uid/gid mismatch
2015-03-08 20:35:04 +00:00
#rtkit = 45; # unused
Update all legacy-style modules I.e., modules that use "require = [options]". Nowadays that should be written as { options = { ... }; config = { ... }; }; Also, use "imports" instead of "require" in places where we actually import another module.
2013-09-04 12:05:09 +01:00
dovecot2 = 46;
dovecot: dovenull user should have its own group. Quoting from https://wiki.dovecot.org/UserIds#dovenulluser: "It should belong to its own private dovenull group where no one else belongs to..."
2018-10-22 18:57:32 +01:00
dovenull2 = 47;
Update all legacy-style modules I.e., modules that use "require = [options]". Nowadays that should be written as { options = { ... }; config = { ... }; }; Also, use "imports" instead of "require" in places where we actually import another module.
2013-09-04 12:05:09 +01:00
prayer = 49;
mpd = 50;
clamav = 51;
Remove F-PROT package and service module (EoL) (#160372)
2022-03-02 19:51:47 +00:00
#fprot = 52; # unused
nixos: resolve uid/gid conflicts This patch resolves all uid/gid conflicts except for nobody/nogroup (seems to make sense that these are the same). All conflicts where determined mechanically, but resolutions were manual. This patch also marks uids/gids with no corresponding group/user as "unused" (aka. reserved). Briefly, - tss group conflicts with dhcpcd The tss group id conflicts with dhcpcd: assign a new number and add a corresponding tss user. - elasticsearch uid conflicts with haproxy gid - resolve firebird/munin conflict - fix fourstorehttp{,d} typo - fix ghostOne typo: the service module refers to gids.ghostone, so use that in ids - memcached uid conflicts with users gid - nagios uid conflicts with disks gid - nscd uid conflicts with wheel gid - ntp uid conflicts with tty gid - resolve postfix/postdrop id uid - redis uid conflicts with keys gid - sshd uid conflicts with kmem gid - tcryptd uid conflicts with openldap gid - unifi uid conflicts with docker gid - uptimed uid conflicts with utmp gid - zope2 uid conflicts with connman gid - tomcat uid/gid mismatch
2015-03-08 20:35:04 +00:00
#bind = 53; # unused
Update all legacy-style modules I.e., modules that use "require = [options]". Nowadays that should be written as { options = { ... }; config = { ... }; }; Also, use "imports" instead of "require" in places where we actually import another module.
2013-09-04 12:05:09 +01:00
wwwrun = 54;
adm = 55;
spamd = 56;
networkmanager = 57;
nslcd = 58;
scanner = 59;
nginx = 60;
chrony service: Members of group chrony can use chronyc
2015-07-12 06:13:04 +01:00
chrony = 61;
Update all legacy-style modules I.e., modules that use "require = [options]". Nowadays that should be written as { options = { ... }; config = { ... }; }; Also, use "imports" instead of "require" in places where we actually import another module.
2013-09-04 12:05:09 +01:00
systemd-journal = 62;
smtpd = 63;
smtpq = 64;
supybot = 65;
iodined = 66;
libvirtd = 67;
graphite = 68;
nodePackages.statsd: remove The package/service is broken. Upstream is dead
2018-11-14 18:27:09 +00:00
#statsd = 69; # removed 2018-11-14
Update all legacy-style modules I.e., modules that use "require = [options]". Nowadays that should be written as { options = { ... }; config = { ... }; }; Also, use "imports" instead of "require" in places where we actually import another module.
2013-09-04 12:05:09 +01:00
transmission = 70;
postgres = 71;
vboxusers = 72;
vboxsf = 73;
nixos/samba: remove services.samba.defaultShare option It's not that difficult to define shares using standard samba config file syntax, so why do we need the semi-configurable .defaultShare option? Also: * It uses /home/smbd and I think /home should be reserved for real human users. * If enabled, it breaks the assumption that .extraConfig continues in the [global] section. Without .defaultShare there is no need for the "smbguest" user and group either, mark them as unused.
2014-09-05 23:45:47 +01:00
smbguest = 74; # unused
Update all legacy-style modules I.e., modules that use "require = [options]". Nowadays that should be written as { options = { ... }; config = { ... }; }; Also, use "imports" instead of "require" in places where we actually import another module.
2013-09-04 12:05:09 +01:00
varnish = 75;
nixos: overhaul datadog module This overhauls the Datadog module a bit to be much more useful. In particular, it adds support for nginx and postgresql monitoring integrations to dd-agent. These have to exist in separate files under /etc/dd-agent, so the module just exposes then as separate options. In the future, more integrations could be added this way. In the process of doing this, I also had to rename the dd-agent user to datadog. Note the UIDs did not change, so this is strictly backwards compatible. The reason for this is to make it easier to create a 'datadog' postgres user with access to pg_stats, as 'dd-agent' typically isn't a valid username. This allows the out of the box configurations to be used. Signed-off-by: Austin Seipp <aseipp@pobox.com>
2014-05-02 06:43:27 +01:00
datadog = 76;
Update all legacy-style modules I.e., modules that use "require = [options]". Nowadays that should be written as { options = { ... }; config = { ... }; }; Also, use "imports" instead of "require" in places where we actually import another module.
2013-09-04 12:05:09 +01:00
lighttpd = 77;
lightdm = 78;
freenet = 79;
ircd = 80;
bacula = 81;
almir: also remove the corresponding module. The almir package was removed in 30291227f2411abaca097773eedb49b8f259e297 at about 2017-08 This module can no more be used without it.
2018-03-25 20:39:02 +01:00
#almir = 82; # removed 2018-03-25, the almir package was removed in 30291227f2411abaca097773eedb49b8f259e297 during 2017-08
Update all legacy-style modules I.e., modules that use "require = [options]". Nowadays that should be written as { options = { ... }; config = { ... }; }; Also, use "imports" instead of "require" in places where we actually import another module.
2013-09-04 12:05:09 +01:00
deluge = 83;
mysql = 84;
rabbitmq = 85;
activemq = 86;
gnunet = 87;
oidentd = 88;
quassel = 89;
amule = 90;
minidlna = 91;
nixos/elasticsearch: Set a group on the user This fixed a problem I had when running ElasticSearch in an LXC container, and it doesn't hurt using a dedicated group instead of nogroup anyway.
2016-07-01 17:01:52 +01:00
elasticsearch = 92;
nixos: resolve uid/gid conflicts This patch resolves all uid/gid conflicts except for nobody/nogroup (seems to make sense that these are the same). All conflicts where determined mechanically, but resolutions were manual. This patch also marks uids/gids with no corresponding group/user as "unused" (aka. reserved). Briefly, - tss group conflicts with dhcpcd The tss group id conflicts with dhcpcd: assign a new number and add a corresponding tss user. - elasticsearch uid conflicts with haproxy gid - resolve firebird/munin conflict - fix fourstorehttp{,d} typo - fix ghostOne typo: the service module refers to gids.ghostone, so use that in ids - memcached uid conflicts with users gid - nagios uid conflicts with disks gid - nscd uid conflicts with wheel gid - ntp uid conflicts with tty gid - resolve postfix/postdrop id uid - redis uid conflicts with keys gid - sshd uid conflicts with kmem gid - tcryptd uid conflicts with openldap gid - unifi uid conflicts with docker gid - uptimed uid conflicts with utmp gid - zope2 uid conflicts with connman gid - tomcat uid/gid mismatch
2015-03-08 20:35:04 +00:00
#tcpcryptd = 93; # unused
firebird = 95;
Add a keys group with read access to /run/keys This allows processes running as unprivileged users access to keys they might need
2014-02-11 12:00:10 +00:00
keys = 96;
nixos/haproxy: Revive the haproxy user and group Running haproxy with "DynamicUser = true" doesn't really work, since it prohibits specifying a TLS certificate bundle with limited permissions. This revives the haproxy user and group, but makes them dynamically allocated by NixOS, rather than statically allocated. It also adds options to specify which user and group haproxy runs as.
2020-03-11 18:52:37 +00:00
#haproxy = 97; # dynamically allocated as of 2020-03-11
nixos: resolve uid/gid conflicts This patch resolves all uid/gid conflicts except for nobody/nogroup (seems to make sense that these are the same). All conflicts where determined mechanically, but resolutions were manual. This patch also marks uids/gids with no corresponding group/user as "unused" (aka. reserved). Briefly, - tss group conflicts with dhcpcd The tss group id conflicts with dhcpcd: assign a new number and add a corresponding tss user. - elasticsearch uid conflicts with haproxy gid - resolve firebird/munin conflict - fix fourstorehttp{,d} typo - fix ghostOne typo: the service module refers to gids.ghostone, so use that in ids - memcached uid conflicts with users gid - nagios uid conflicts with disks gid - nscd uid conflicts with wheel gid - ntp uid conflicts with tty gid - resolve postfix/postdrop id uid - redis uid conflicts with keys gid - sshd uid conflicts with kmem gid - tcryptd uid conflicts with openldap gid - unifi uid conflicts with docker gid - uptimed uid conflicts with utmp gid - zope2 uid conflicts with connman gid - tomcat uid/gid mismatch
2015-03-08 20:35:04 +00:00
#mongodb = 98; # unused
nixos/openldap: switch to slapd.d configuration The old slapd.conf is deprecated. Replace with slapd.d, and use this opportunity to write some structured settings. Incidentally, this fixes the fact that openldap is reported up before any checks have completed, by using forking mode.
2020-08-02 23:52:37 +01:00
#openldap = 99; # dynamically allocated as of PR#94610
nixos: resolve uid/gid conflicts This patch resolves all uid/gid conflicts except for nobody/nogroup (seems to make sense that these are the same). All conflicts where determined mechanically, but resolutions were manual. This patch also marks uids/gids with no corresponding group/user as "unused" (aka. reserved). Briefly, - tss group conflicts with dhcpcd The tss group id conflicts with dhcpcd: assign a new number and add a corresponding tss user. - elasticsearch uid conflicts with haproxy gid - resolve firebird/munin conflict - fix fourstorehttp{,d} typo - fix ghostOne typo: the service module refers to gids.ghostone, so use that in ids - memcached uid conflicts with users gid - nagios uid conflicts with disks gid - nscd uid conflicts with wheel gid - ntp uid conflicts with tty gid - resolve postfix/postdrop id uid - redis uid conflicts with keys gid - sshd uid conflicts with kmem gid - tcryptd uid conflicts with openldap gid - unifi uid conflicts with docker gid - uptimed uid conflicts with utmp gid - zope2 uid conflicts with connman gid - tomcat uid/gid mismatch
2015-03-08 20:35:04 +00:00
munin = 102;
#logcheck = 103; # unused
#nix-ssh = 104; # unused
nixos: Assign uid/gid to dictd's service user.
2014-02-21 11:40:05 +00:00
dictd = 105;
couchdb: add ids
2014-02-27 13:33:30 +00:00
couchdb = 106;
nixos/ids: remove reserved searx ids
2020-10-27 13:10:33 +00:00
#searx = 107; # dynamically allocated as of 2020-10-27
kippo: cleanup the corresponding broken module.
2021-10-07 01:18:06 +01:00
#kippo = 108; # removed 2021-10-07, the kippo package was removed in 1b213f321cdbfcf868b96fd9959c24207ce1b66a during 2021-04
Add jenkins continuous integration server and user. By default the jenkins server is executed under the user "jenkins". Which can be configured using users.jenkins.* options. If a different user is requested by changing services.jenkins.user then none of the users.jenkins options apply. This patch does not include jenkins slave configuration. Some config options will probably change when this is implemented. Aspects like the user and environment are typically identical between slave and master. The service configs are different. The design is for users.jenkins to cover the shared aspects while services.jenkins and services.jenkins-slave cover the master and slave specific aspects, respectively. Another option would be to place everything under services.jenkins and have a config that selects master vs slave.
2014-02-10 20:07:12 +00:00
jenkins = 109;
Merge branch 'pkgs/systemd/journald_http_gateway' of git://github.com/offlinehacker/nixpkgs systemd: python support & journal http gateway Conflicts: nixos/modules/misc/ids.nix
2014-03-14 23:16:59 +00:00
systemd-journal-gateway = 110;
notbit: removed dead package The Bitmessage protocol v3 became mandatory on 16 Nov 2014 and notbit does not support it, nor has there been any activity in the project repository since then.
2016-01-07 03:34:31 +00:00
#notbit = 111; # unused
aerospike: init at 4.2.0.4 Co-authored-by: Volth <volth@webmaster.ms>
2018-07-16 01:40:53 +01:00
aerospike = 111;
nixos: resolve uid/gid conflicts This patch resolves all uid/gid conflicts except for nobody/nogroup (seems to make sense that these are the same). All conflicts where determined mechanically, but resolutions were manual. This patch also marks uids/gids with no corresponding group/user as "unused" (aka. reserved). Briefly, - tss group conflicts with dhcpcd The tss group id conflicts with dhcpcd: assign a new number and add a corresponding tss user. - elasticsearch uid conflicts with haproxy gid - resolve firebird/munin conflict - fix fourstorehttp{,d} typo - fix ghostOne typo: the service module refers to gids.ghostone, so use that in ids - memcached uid conflicts with users gid - nagios uid conflicts with disks gid - nscd uid conflicts with wheel gid - ntp uid conflicts with tty gid - resolve postfix/postdrop id uid - redis uid conflicts with keys gid - sshd uid conflicts with kmem gid - tcryptd uid conflicts with openldap gid - unifi uid conflicts with docker gid - uptimed uid conflicts with utmp gid - zope2 uid conflicts with connman gid - tomcat uid/gid mismatch
2015-03-08 20:35:04 +00:00
#ngircd = 112; # unused
nixos/btsync: remove Remove the btsync module. Bittorrent Sync was renamed to Resilio Sync in 2016, which is supported by the resilio module. Since Resilio Sync had some security updates since 2016, it is not safe to run Bittorrent Sync anymore.
2019-06-02 19:18:15 +01:00
#btsync = 113; # unused
nixos: resolve uid/gid conflicts This patch resolves all uid/gid conflicts except for nobody/nogroup (seems to make sense that these are the same). All conflicts where determined mechanically, but resolutions were manual. This patch also marks uids/gids with no corresponding group/user as "unused" (aka. reserved). Briefly, - tss group conflicts with dhcpcd The tss group id conflicts with dhcpcd: assign a new number and add a corresponding tss user. - elasticsearch uid conflicts with haproxy gid - resolve firebird/munin conflict - fix fourstorehttp{,d} typo - fix ghostOne typo: the service module refers to gids.ghostone, so use that in ids - memcached uid conflicts with users gid - nagios uid conflicts with disks gid - nscd uid conflicts with wheel gid - ntp uid conflicts with tty gid - resolve postfix/postdrop id uid - redis uid conflicts with keys gid - sshd uid conflicts with kmem gid - tcryptd uid conflicts with openldap gid - unifi uid conflicts with docker gid - uptimed uid conflicts with utmp gid - zope2 uid conflicts with connman gid - tomcat uid/gid mismatch
2015-03-08 20:35:04 +00:00
#minecraft = 114; # unused
vault: run as an unpivileged user
2017-06-27 15:54:25 +01:00
vault = 115;
nixos: resolve uid/gid conflicts This patch resolves all uid/gid conflicts except for nobody/nogroup (seems to make sense that these are the same). All conflicts where determined mechanically, but resolutions were manual. This patch also marks uids/gids with no corresponding group/user as "unused" (aka. reserved). Briefly, - tss group conflicts with dhcpcd The tss group id conflicts with dhcpcd: assign a new number and add a corresponding tss user. - elasticsearch uid conflicts with haproxy gid - resolve firebird/munin conflict - fix fourstorehttp{,d} typo - fix ghostOne typo: the service module refers to gids.ghostone, so use that in ids - memcached uid conflicts with users gid - nagios uid conflicts with disks gid - nscd uid conflicts with wheel gid - ntp uid conflicts with tty gid - resolve postfix/postdrop id uid - redis uid conflicts with keys gid - sshd uid conflicts with kmem gid - tcryptd uid conflicts with openldap gid - unifi uid conflicts with docker gid - uptimed uid conflicts with utmp gid - zope2 uid conflicts with connman gid - tomcat uid/gid mismatch
2015-03-08 20:35:04 +00:00
#ripped = 116; # unused
nixos/murmur: add murmur group, don't run as nogroup fixes #101980
2020-10-29 09:32:04 +00:00
murmur = 117;
nixos: reserve some uids/gids I have some NixOS modules that I keep out of tree, and having UIDs/GIDs reserved is quite helpful. Signed-off-by: Austin Seipp <aseipp@pobox.com>
2014-04-02 17:01:25 +01:00
foundationdb = 118;
newrelic = 119;
starbound = 120;
Fix hydra UID The style for IDs dictates that groups/users should have the same ID - so if a user doesn't have a group or vice versa, then we should skip that ID. In this case, we had already assigned grsecurity GID 121, but I accidentally also assigned Hydra UID 121. Instead, let's assign Hydra UID 122. And also assign a GID (122) as well. Luckily nobody was depending on this yet (except me). Signed-off-by: Austin Seipp <aseipp@pobox.com>
2014-04-15 08:28:01 +01:00
hydra = 122;
nixos: add spiped service module Signed-off-by: Austin Seipp <aseipp@pobox.com>
2014-04-15 09:21:53 +01:00
spiped = 123;
Add TeamSpeak 3 server & service module (close #2056) Conflicts (trivial): lib/maintainers.nix nixos/modules/misc/ids.nix
2014-03-29 00:40:30 +00:00
teamspeak = 124;
nixos: add influxdb module
2014-05-27 21:54:43 +01:00
influxdb = 125;
nsd-service: add service module for nsd
2014-06-12 10:20:43 +01:00
nsd = 126;
nixos/gitolite: use group 'gitolite' instead of 'nogroup' Having files (git repositories) owned by 'nogroup' is a bad idea.
2017-09-12 10:31:29 +01:00
gitolite = 127;
Merge remote-tracking branch 'nixos/master' into feature/add-znc-module Conflicts: nixos/modules/misc/ids.nix
2014-07-03 17:30:11 +01:00
znc = 128;
polipo: new service expression
2014-07-15 15:16:58 +01:00
polipo = 129;
Add NixOS module for Mopidy, a music player daemon
2014-07-28 18:52:32 +01:00
mopidy = 130;
Upgrade docker to 1.1.2 and add docker module This version of module has disabled socketActivation, because until nixos upgrade systemd to at least 214, systemd does not support SocketGroup. So socket is created with "root" group when socketActivation enabled. Should be fixed as soon as systemd upgraded. Includes changes from #3015 and supersedes #3028
2014-07-27 23:00:59 +01:00
docker = 131;
gdm: Add very experimental display manager
2014-04-02 17:21:00 +01:00
gdm = 132;
nixos: resolve uid/gid conflicts This patch resolves all uid/gid conflicts except for nobody/nogroup (seems to make sense that these are the same). All conflicts where determined mechanically, but resolutions were manual. This patch also marks uids/gids with no corresponding group/user as "unused" (aka. reserved). Briefly, - tss group conflicts with dhcpcd The tss group id conflicts with dhcpcd: assign a new number and add a corresponding tss user. - elasticsearch uid conflicts with haproxy gid - resolve firebird/munin conflict - fix fourstorehttp{,d} typo - fix ghostOne typo: the service module refers to gids.ghostone, so use that in ids - memcached uid conflicts with users gid - nagios uid conflicts with disks gid - nscd uid conflicts with wheel gid - ntp uid conflicts with tty gid - resolve postfix/postdrop id uid - redis uid conflicts with keys gid - sshd uid conflicts with kmem gid - tcryptd uid conflicts with openldap gid - unifi uid conflicts with docker gid - uptimed uid conflicts with utmp gid - zope2 uid conflicts with connman gid - tomcat uid/gid mismatch
2015-03-08 20:35:04 +00:00
#dhcpcd = 133; # unused
siproxd: initial service expression
2014-07-10 19:08:38 +01:00
siproxd = 134;
Add mlmmj package and nixos module.
2014-07-08 23:43:26 +01:00
mlmmj = 135;
nixos: resolve uid/gid conflicts This patch resolves all uid/gid conflicts except for nobody/nogroup (seems to make sense that these are the same). All conflicts where determined mechanically, but resolutions were manual. This patch also marks uids/gids with no corresponding group/user as "unused" (aka. reserved). Briefly, - tss group conflicts with dhcpcd The tss group id conflicts with dhcpcd: assign a new number and add a corresponding tss user. - elasticsearch uid conflicts with haproxy gid - resolve firebird/munin conflict - fix fourstorehttp{,d} typo - fix ghostOne typo: the service module refers to gids.ghostone, so use that in ids - memcached uid conflicts with users gid - nagios uid conflicts with disks gid - nscd uid conflicts with wheel gid - ntp uid conflicts with tty gid - resolve postfix/postdrop id uid - redis uid conflicts with keys gid - sshd uid conflicts with kmem gid - tcryptd uid conflicts with openldap gid - unifi uid conflicts with docker gid - uptimed uid conflicts with utmp gid - zope2 uid conflicts with connman gid - tomcat uid/gid mismatch
2015-03-08 20:35:04 +00:00
#neo4j = 136; # unused
Add NixOS module for Riemann monitoring server.
2014-08-23 16:04:34 +01:00
riemann = 137;
Add NixOS module for the Riemann dashboard server
2014-08-23 16:39:45 +01:00
riemanndash = 138;
nixos: resolve uid/gid conflicts This patch resolves all uid/gid conflicts except for nobody/nogroup (seems to make sense that these are the same). All conflicts where determined mechanically, but resolutions were manual. This patch also marks uids/gids with no corresponding group/user as "unused" (aka. reserved). Briefly, - tss group conflicts with dhcpcd The tss group id conflicts with dhcpcd: assign a new number and add a corresponding tss user. - elasticsearch uid conflicts with haproxy gid - resolve firebird/munin conflict - fix fourstorehttp{,d} typo - fix ghostOne typo: the service module refers to gids.ghostone, so use that in ids - memcached uid conflicts with users gid - nagios uid conflicts with disks gid - nscd uid conflicts with wheel gid - ntp uid conflicts with tty gid - resolve postfix/postdrop id uid - redis uid conflicts with keys gid - sshd uid conflicts with kmem gid - tcryptd uid conflicts with openldap gid - unifi uid conflicts with docker gid - uptimed uid conflicts with utmp gid - zope2 uid conflicts with connman gid - tomcat uid/gid mismatch
2015-03-08 20:35:04 +00:00
#radvd = 139; # unused
#zookeeper = 140; # unused
#dnsmasq = 141; # unused
Add IDs for uhub service
2014-09-01 07:53:00 +01:00
uhub = 142;
nixos: resolve uid/gid conflicts This patch resolves all uid/gid conflicts except for nobody/nogroup (seems to make sense that these are the same). All conflicts where determined mechanically, but resolutions were manual. This patch also marks uids/gids with no corresponding group/user as "unused" (aka. reserved). Briefly, - tss group conflicts with dhcpcd The tss group id conflicts with dhcpcd: assign a new number and add a corresponding tss user. - elasticsearch uid conflicts with haproxy gid - resolve firebird/munin conflict - fix fourstorehttp{,d} typo - fix ghostOne typo: the service module refers to gids.ghostone, so use that in ids - memcached uid conflicts with users gid - nagios uid conflicts with disks gid - nscd uid conflicts with wheel gid - ntp uid conflicts with tty gid - resolve postfix/postdrop id uid - redis uid conflicts with keys gid - sshd uid conflicts with kmem gid - tcryptd uid conflicts with openldap gid - unifi uid conflicts with docker gid - uptimed uid conflicts with utmp gid - zope2 uid conflicts with connman gid - tomcat uid/gid mismatch
2015-03-08 20:35:04 +00:00
#yandexdisk = 143; # unused
modules: add mxisd with test
2018-11-04 21:18:06 +00:00
mxisd = 144; # was once collectd
nixos: resolve uid/gid conflicts This patch resolves all uid/gid conflicts except for nobody/nogroup (seems to make sense that these are the same). All conflicts where determined mechanically, but resolutions were manual. This patch also marks uids/gids with no corresponding group/user as "unused" (aka. reserved). Briefly, - tss group conflicts with dhcpcd The tss group id conflicts with dhcpcd: assign a new number and add a corresponding tss user. - elasticsearch uid conflicts with haproxy gid - resolve firebird/munin conflict - fix fourstorehttp{,d} typo - fix ghostOne typo: the service module refers to gids.ghostone, so use that in ids - memcached uid conflicts with users gid - nagios uid conflicts with disks gid - nscd uid conflicts with wheel gid - ntp uid conflicts with tty gid - resolve postfix/postdrop id uid - redis uid conflicts with keys gid - sshd uid conflicts with kmem gid - tcryptd uid conflicts with openldap gid - unifi uid conflicts with docker gid - uptimed uid conflicts with utmp gid - zope2 uid conflicts with connman gid - tomcat uid/gid mismatch
2015-03-08 20:35:04 +00:00
#consul = 145; # unused
mailpile, nixos/mailpile: drop Still actively developed and yet stuck on python2. Also marked as vulnerable and their issue tracker contains yet another security issue reported in 2021/10 that the upstream hasn't acknowledged yet. Mind blown. Closes: #135543, #97274, #97275
2022-01-12 01:27:51 +00:00
#mailpile = 146; # removed 2022-01-12
nixos: add redmine service
2014-10-07 09:53:01 +01:00
redmine = 147;
seeks: remove, upstream unmaintained
2020-06-21 22:55:14 +01:00
#seeks = 148; # removed 2020-06-21
nixos: prosody was clashing with seeks unix ids
2014-10-20 16:22:01 +01:00
prosody = 149;
i2pd: added package, service
2014-11-09 08:44:47 +00:00
i2pd = 150;
nixos/ids: Fix systemd ids
2014-11-19 23:01:44 +00:00
systemd-network = 152;
systemd-resolve = 153;
systemd-timesync = 154;
initial liquidsoap service expression
2014-11-20 22:30:24 +00:00
liquidsoap = 155;
nixos: resolve uid/gid conflicts This patch resolves all uid/gid conflicts except for nobody/nogroup (seems to make sense that these are the same). All conflicts where determined mechanically, but resolutions were manual. This patch also marks uids/gids with no corresponding group/user as "unused" (aka. reserved). Briefly, - tss group conflicts with dhcpcd The tss group id conflicts with dhcpcd: assign a new number and add a corresponding tss user. - elasticsearch uid conflicts with haproxy gid - resolve firebird/munin conflict - fix fourstorehttp{,d} typo - fix ghostOne typo: the service module refers to gids.ghostone, so use that in ids - memcached uid conflicts with users gid - nagios uid conflicts with disks gid - nscd uid conflicts with wheel gid - ntp uid conflicts with tty gid - resolve postfix/postdrop id uid - redis uid conflicts with keys gid - sshd uid conflicts with kmem gid - tcryptd uid conflicts with openldap gid - unifi uid conflicts with docker gid - uptimed uid conflicts with utmp gid - zope2 uid conflicts with connman gid - tomcat uid/gid mismatch
2015-03-08 20:35:04 +00:00
#etcd = 156; # unused
Fix some uid/gid clashes
2015-03-03 19:21:36 +00:00
hbase = 158;
opentsdb = 159;
Fix some bad gids Issue #3727.
2015-01-05 10:58:17 +00:00
scollector = 160;
bosun = 161;
kubernetes = 162;
nixos: resolve uid/gid conflicts This patch resolves all uid/gid conflicts except for nobody/nogroup (seems to make sense that these are the same). All conflicts where determined mechanically, but resolutions were manual. This patch also marks uids/gids with no corresponding group/user as "unused" (aka. reserved). Briefly, - tss group conflicts with dhcpcd The tss group id conflicts with dhcpcd: assign a new number and add a corresponding tss user. - elasticsearch uid conflicts with haproxy gid - resolve firebird/munin conflict - fix fourstorehttp{,d} typo - fix ghostOne typo: the service module refers to gids.ghostone, so use that in ids - memcached uid conflicts with users gid - nagios uid conflicts with disks gid - nscd uid conflicts with wheel gid - ntp uid conflicts with tty gid - resolve postfix/postdrop id uid - redis uid conflicts with keys gid - sshd uid conflicts with kmem gid - tcryptd uid conflicts with openldap gid - unifi uid conflicts with docker gid - uptimed uid conflicts with utmp gid - zope2 uid conflicts with connman gid - tomcat uid/gid mismatch
2015-03-08 20:35:04 +00:00
#peerflix = 163; # unused
#chronos = 164; # unused
Fix some bad gids Issue #3727.
2015-01-05 10:58:17 +00:00
gitlab = 165;
Fix some uid/gid clashes
2015-03-03 19:21:36 +00:00
nylon = 168;
panamax: remove packages, module and test was broken and depends on (deprecated) fleet packages: panamax_api, panamax_ui
2018-05-04 23:22:18 +01:00
#panamax = 170; # unused
exim: add version 4.85 incl. nixos module
2015-02-18 18:55:07 +00:00
exim = 172;
fleet: remove package, module, test deprecated and unmaintained upstream
2018-05-04 23:09:43 +01:00
#fleet = 173; # unused
Add "input" group This is required by systemd >= 215.
2015-03-03 19:23:32 +00:00
input = 174;
nixos/sddm: add display manager
2015-03-02 17:58:35 +00:00
sddm = 175;
nixos/tpm2: remove tss static gid
2021-09-20 17:24:33 +01:00
#tss = 176; #dynamically allocateda as of 2021-09-20
nixos/memcached: make unix sockets usuable before: - /var/run/memcached is a bad default for a socket path, since its parent directory must be writeable by memcached. - Socket directory was not created by the module itself -> this was left as a burden to the user? - Having a static uid with a dynamic user name is not very useful. after: - Replace services.memcached.socket by a boolean flag. This simplifies our code, since we do not have to check if the user specifies a path with a parent directory that should be owned by memcached (/run/memcached/memcached.sock -> /run/memcached). - Remove fixed uid/gid allocation. The only file ever owned by the daemon is the socket that will be recreated on every start. Therefore user and group ids do not need to be static. - only create the memcached user, if the user has not specified a different one. The major use case for changing option is to allow existing services (such as php-fpm) opening the local unix socket. If we would unconditionally create a user that option would be useless.
2018-01-03 11:10:45 +00:00
#memcached = 177; # unused, removed 2018-01-03
nixos: resolve uid/gid conflicts This patch resolves all uid/gid conflicts except for nobody/nogroup (seems to make sense that these are the same). All conflicts where determined mechanically, but resolutions were manual. This patch also marks uids/gids with no corresponding group/user as "unused" (aka. reserved). Briefly, - tss group conflicts with dhcpcd The tss group id conflicts with dhcpcd: assign a new number and add a corresponding tss user. - elasticsearch uid conflicts with haproxy gid - resolve firebird/munin conflict - fix fourstorehttp{,d} typo - fix ghostOne typo: the service module refers to gids.ghostone, so use that in ids - memcached uid conflicts with users gid - nagios uid conflicts with disks gid - nscd uid conflicts with wheel gid - ntp uid conflicts with tty gid - resolve postfix/postdrop id uid - redis uid conflicts with keys gid - sshd uid conflicts with kmem gid - tcryptd uid conflicts with openldap gid - unifi uid conflicts with docker gid - uptimed uid conflicts with utmp gid - zope2 uid conflicts with connman gid - tomcat uid/gid mismatch
2015-03-08 20:35:04 +00:00
#ntp = 179; # unused
nixos/zabbixWeb: replace httpd subservice with new module
2019-07-11 23:44:51 +01:00
zabbix = 180;
nixos/redis: remove static uid/gid assignment all files are chowned on startup
2018-01-03 10:15:47 +00:00
#redis = 181; # unused, removed 2018-01-03
nixos: resolve uid/gid conflicts This patch resolves all uid/gid conflicts except for nobody/nogroup (seems to make sense that these are the same). All conflicts where determined mechanically, but resolutions were manual. This patch also marks uids/gids with no corresponding group/user as "unused" (aka. reserved). Briefly, - tss group conflicts with dhcpcd The tss group id conflicts with dhcpcd: assign a new number and add a corresponding tss user. - elasticsearch uid conflicts with haproxy gid - resolve firebird/munin conflict - fix fourstorehttp{,d} typo - fix ghostOne typo: the service module refers to gids.ghostone, so use that in ids - memcached uid conflicts with users gid - nagios uid conflicts with disks gid - nscd uid conflicts with wheel gid - ntp uid conflicts with tty gid - resolve postfix/postdrop id uid - redis uid conflicts with keys gid - sshd uid conflicts with kmem gid - tcryptd uid conflicts with openldap gid - unifi uid conflicts with docker gid - uptimed uid conflicts with utmp gid - zope2 uid conflicts with connman gid - tomcat uid/gid mismatch
2015-03-08 20:35:04 +00:00
#unifi = 183; # unused
#uptimed = 184; # unused
#zope2 = 185; # unused
Add ripple data api package and nixos service
2015-03-22 22:12:11 +00:00
#ripple-data-api = 186; #unused
Add MediaTomb service
2015-03-27 10:48:50 +00:00
mediatomb = 187;
nixos/rdnssd: Major refactoring This updates rdnssd to the following: * Using the systemd interfaces directly * Using the rdnssd user instead of the root user * Integrating with resolvconf instead of writing directly to /etc/resolv.conf
2015-04-05 05:20:04 +01:00
#rdnssd = 188; # unused
ihaskell: re-enable
2017-11-06 06:29:56 +00:00
ihaskell = 189;
i2p: add nixos service
2015-04-15 11:52:06 +01:00
i2p = 190;
lambdabot: add nixos service
2015-04-14 00:06:37 +01:00
lambdabot = 191;
Fix asterisk & asterisk: 13.6.0 -> 14.1.2 (#20788) * fix/asterisk-module: use unix-group for asterisk-files * fix/asterisk-module: add configOption to use some default config-files * fix/asterisk-module: correction of skel copy * fix/asterisk-module: use /etc/asterisk as configDir * fix/asterisk-module: add reload; do not restart unit * asterisk: 13.6.0 -> 14.1.2 * fix/asterisk: compile with lua, pjsip, format_mp3 * fix/asterisk: fix indentation * fix/asterisk: remove broken flag
2016-12-28 22:04:58 +00:00
asterisk = 192;
plex: init at 0.9.11.16.958 Added a package and module for Plex Media Server, an application for managing media collections across multiple devices.
2015-04-16 19:15:59 +01:00
plex = 193;
Sane default configuration for sabnzbd module Added option to set user. Use unpriviledged user by default. Add sane default for configuration location.
2015-05-01 20:38:00 +01:00
sabnzbd = 194;
nixos: add grafana module
2015-04-25 15:02:44 +01:00
#grafana = 196; #unused
Add skydns module
2015-06-08 12:36:05 +01:00
#skydns = 197; #unused
ripple-rest: remove marked as broken for > 1 yr, development is frozen and author recommends moving to https://github.com/ripple/ripple-lib
2017-08-12 12:38:32 +01:00
# ripple-rest = 198; # unused, removed 2017-08-12
nixos/nix-serve: Run as a separate user and add a signing key parameter
2015-06-18 03:10:23 +01:00
#nix-serve = 199; #unused
tvheadend: init at 4.0.4
2015-06-20 21:33:57 +01:00
#tvheadend = 200; #unused
uwsgi-service: Add user/group for uwsgi service. Also add a uwsgi directory under /run (defaulting to /run/uwsgi) where the uwsgi user can place sockets.
2015-06-24 15:42:43 +01:00
uwsgi = 201;
nixos: added gitit service
2015-06-08 23:11:24 +01:00
gitit = 202;
Merge remote-tracking branch 'projectorhq/riemann-tools' Add riemann-tools package and service
2015-07-01 13:44:38 +01:00
riemanntools = 203;
subsonic service: init Add a systemd service and UID/GID for the Subsonic personal media streamer server (<http://subsonic.org>).
2015-07-04 01:42:16 +01:00
subsonic = 204;
riak, nixos/riak: remove Riak have been updated a lot since the version 2.2 (now 3.0.10) but has seen no updated to the package. This is at this point a problem forcing us to maintain old versions of erlang. We would be happy to re accept a newer version of Riak if someone want to spend the time to set it up.
2022-06-22 13:14:08 +01:00
# riak = 205;#unused, removed 2022-06-22
shout service: New module.
2015-08-01 00:15:18 +01:00
#shout = 206; #unused
GateOne: init at 1.2
2015-07-31 05:22:44 +01:00
gateone = 207;
namecoind nixos module: security enhancements
2015-09-10 17:04:04 +01:00
namecoin = 208;
nixos: define the primary group of users where needed
2021-08-08 13:00:00 +01:00
#lxd = 210; # unused
kibana service: init
2015-09-18 23:18:43 +01:00
#kibana = 211;
xtreemfs: add nixos module
2015-09-13 13:49:19 +01:00
xtreemfs = 212;
calibre-server service: init
2015-09-28 04:31:17 +01:00
calibre-server = 213;
services/misc/bepasty: init at 2015-10-21 This module implements a way to start one or more bepasty servers. It supports configuring the listen address of gunicorn and how bepasty behaves internally. Configuring multiple bepasty servers provides a way to serve pastes externally without authentication and provide creating,listing,deleting pastes interally. nginx can be used to provide access via hostname + listen address. `configuration.nix`: services.bepasty = { enable = true; servers = { internal = { defaultPermissions = "admin,list,create,read,delete"; secretKey = "secret"; bind = "127.0.0.1:8000"; }; external = { defaultPermissions = "read"; bind = "127.0.0.1:8001"; secretKey = "another-secret"; }; }; };
2015-10-21 13:45:27 +01:00
bepasty = 215;
nixos/pump.io: also comment-out the uid
2018-03-04 09:48:29 +00:00
# pumpio = 216; # unused, removed 2018-02-24
networkmanager: set uid/gid for the networkmanager openvpn agent Fixes #11317
2015-12-08 16:46:57 +00:00
nm-openvpn = 217;
nixos/mathics: New service and test
2015-09-08 08:17:21 +01:00
mathics = 218;
nixos/ejabberd: update service
2016-01-03 02:36:19 +00:00
ejabberd = 219;
nixos/postsrsd: add module
2016-01-06 03:04:50 +00:00
postsrsd = 220;
nixos/opendkim: add module
2016-01-06 22:10:56 +00:00
opendkim = 221;
nixos/dspam: add module
2016-01-07 01:17:42 +00:00
dspam = 222;
nixos/gale: remove This should have been removed along the package in 3f7d959.
2021-06-10 01:33:10 +01:00
# gale = 223; removed 2021-06-10
matrix-synapse: init at 0.12.0
2016-01-08 14:12:00 +00:00
matrix-synapse = 224;
nixos: Add module for rspamd
2016-01-12 09:06:46 +00:00
rspamd = 225;
rmilter: remove deprecated package (and module)
2019-08-23 14:24:35 +01:00
# rmilter = 226; # unused, removed 2019-08-22
cfdyndns: init at 0.0.1
2016-01-17 12:11:09 +00:00
cfdyndns = 227;
Merge branch 'pdnsd-service' of https://github.com/nfjinjing/nixpkgs Closes #12932
2016-02-16 17:35:01 +00:00
pdnsd = 229;
octoprint service: init
2016-02-14 11:58:09 +00:00
octoprint = 230;
nixos: define the primary group of users where needed
2021-08-08 13:00:00 +01:00
#radicale = 234;# dynamically allocated as of 2021-09-03
syncthing: run daemon with dedicated user as default
2016-04-01 00:26:52 +01:00
syncthing = 237;
caddy service: initial implementation
2016-04-05 02:30:21 +01:00
caddy = 239;
Merge pull request #14476 (taskserver) This adds a Taskserver module along with documentation and a small helper tool which eases managing a custom CA along with Taskserver organisations, users and groups. Taskserver is the server component of Taskwarrior, a TODO list application for the command line. The work has been started by @matthiasbeyer back in mid 2015 and I have continued to work on it recently, so this merge contains commits from both of us. Thanks particularly to @nbp and @matthiasbeyer for reviewing and suggesting improvements. I've tested this with the new test (nixos/tests/taskserver.nix) this branch adds and it fails because of the changes introduced by the closure-size branch, so we need to do additional work on base of this.
2016-04-14 23:09:23 +01:00
taskd = 240;
nixos/factorio: sandbox service using systemd - DynamicUser enabled instead of static uid/gid - Enables most sandboxing options systemd offers
2019-05-01 20:56:58 +01:00
# factorio = 241; # unused
emby: Drop package and module and refer to jellyfin
2019-05-01 12:19:30 +01:00
# emby = 242; # unused, removed 2019-05-01
sniproxy service: init
2016-05-11 05:18:38 +01:00
sniproxy = 244;
nzbget: 16.4 -> 17.0-r1686 and nzbget service
2016-05-04 09:58:01 +01:00
nzbget = 245;
mosquitto service: init Initial Mosquitto MQTT Broker service file.
2016-05-22 15:07:26 +01:00
mosquitto = 246;
toxvpn: init at 20151111 (Authored by @cleverca22)
2016-05-29 23:07:54 +01:00
#toxvpn = 247; # unused
squeezelite service: init
2016-06-11 13:46:02 +01:00
#squeezelite = 248; #unused
coturn: init at 4.5.0.3 (#16284)
2016-06-21 11:59:29 +01:00
turnserver = 249;
nixos: define the primary group of users where needed
2021-08-08 13:00:00 +01:00
#smokeping = 250;# dynamically allocated as of 2021-09-03
Add gocd agent and server service packages (#16273) GoCD is an open source continuous delivery server specializing in advanced workflow modeling and visualization. Update maintainers list to include swarren83. Update module list to include gocd agent and server module. Update packages list to include gocd agent and server package. Update version, revision and checksum for GoCD release 16.5.0.
2016-07-22 23:29:18 +01:00
gocd-agent = 251;
gocd-server = 252;
Add Terraria server service (#16832)
2016-08-07 02:58:38 +01:00
terraria = 253;
mattermost service: init
2016-08-15 02:17:53 +01:00
mattermost = 254;
prometheus service: add This is based on @benleys work: https://github.com/NixOS/nixpkgs/pull/8216 I updated changed the user and group ids.
2015-06-08 07:36:56 +01:00
prometheus = 255;
telegraf: init at 1.0.0 Signed-off-by: Jörg Thalheim <joerg@higgsboson.tk>
2016-09-08 14:30:20 +01:00
#telegraf = 256; # unused
gitlab-runner service: initial version
2016-09-17 12:08:18 +01:00
gitlab-runner = 257;
postgrey: init at 1.36 (includes service)
2015-11-17 17:30:10 +00:00
postgrey = 258;
hound: init module
2016-10-12 23:58:56 +01:00
hound = 259;
leaps: 0.5.1 + add a service + test
2016-11-06 09:33:21 +00:00
leaps = 260;
services: Add Interplanetary File System service Signed-off-by: Maximilian Güntner <code@klandest.in>
2016-10-30 19:39:53 +00:00
ipfs = 261;
riak-cs: delete
2020-10-14 13:59:42 +01:00
# stanchion = 262; # unused, removed 2020-10-14
# riak-cs = 263; # unused, removed 2020-10-14
infinoted service: init Service module for the dedicated gobby server included in libinfinity
2016-11-27 16:23:21 +00:00
infinoted = 264;
Add sickbeard module (with SickGear & SickRage)
2018-09-16 20:54:16 +01:00
sickbeard = 265;
headphones: init at 0.5.19
2018-09-16 20:47:47 +01:00
headphones = 266;
couchpotato, nixos/couchpotato: remove Using python2 and abadoned upstream in 2020, last release in 2015.
2022-01-02 01:17:29 +00:00
# couchpotato = 267; # unused, removed 2022-01-01
gogs service: init
2016-10-09 18:04:42 +01:00
gogs = 268;
Revert "Revert "Merge master into staging-next"" In 87a19e9048773d5a363679617406ad148d36c3b8 I merged staging-next into master using the GitHub gui as intended. In ac241fb7a570d6cf81d229ad22a8889602639160 I merged master into staging-next for the next staging cycle, however, I accidentally pushed it to master. Thinking this may cause trouble, I reverted it in 0be87c79797a5fa384fbc356c74ed54f9f7829ea. This was however wrong, as it "removed" master. This reverts commit 0be87c79797a5fa384fbc356c74ed54f9f7829ea.
2020-02-05 18:27:16 +00:00
#kresd = 270; # switched to "knot-resolver" with dynamic ID
rpcbind service: use upstream systemd unit
2017-01-29 17:06:17 +00:00
#rpc = 271; # unused
nixos/geoip-updater: run as user 'geoip' instead of 'nobody' That way 'nobody' is prevented from messing with the databases.
2017-02-13 21:26:21 +00:00
#geoip = 272; # unused
fcron: 3.1.2 -> 3.2.1 fixes #23320 #23413
2017-03-05 21:40:01 +00:00
fcron = 273;
nixos: static ids for jackett, radarr, sonarr
2017-04-22 08:44:12 +01:00
sonarr = 274;
radarr = 275;
jackett = 276;
Merge branch 'master' into aria2.service
2017-04-27 15:50:13 +01:00
aria2 = 277;
Merge branch 'master' into clickhouse
2017-05-01 06:33:31 +01:00
clickhouse = 278;
resilio service: replaces btsync service, which is no longer supported upstream.
2017-06-01 15:50:17 +01:00
rslsync = 279;
minio service: add inital service features: - change listen port and address - configure config and data directory - basic test to check if minio server starts
2017-06-25 17:43:10 +01:00
minio = 280;
Reserve uid/gids for kanboard
2017-10-09 12:44:32 +01:00
kanboard = 281;
nixos pykms: run via DynamicUser
2018-03-26 08:16:22 +01:00
# pykms = 282; # DynamicUser = true
nixos user: reserve kodi
2017-10-13 03:34:27 +01:00
kodi = 283;
ixos ids: reserve restya-board
2017-11-22 11:11:46 +00:00
restya-board = 284;
nixos/mighttpd2: init
2018-01-04 17:19:54 +00:00
mighttpd2 = 285;
home-assistant: add NixOS module
2018-01-23 09:51:13 +00:00
hass = 286;
nixos/monero: use isSystemUser = true
2021-05-05 13:47:46 +01:00
# monero = 287; # dynamically allocated as of 2021-05-08
nixos/ceph: init module (#35299) All 5 daemon types can be enabled and configured through the module and the module both creates the ceph.conf required but also creates and enables specific services for each daemon, based on the systemd service files that upstream provides.
2018-03-01 11:47:13 +00:00
ceph = 288;
duplicati: create service
2018-04-07 20:23:04 +01:00
duplicati = 289;
nixos/monetdb: init (#39812)
2018-05-01 15:44:12 +01:00
monetdb = 290;
restic-rest-server module: init
2018-05-03 20:30:06 +01:00
restic = 291;
ids: assing openvpn
2018-05-26 04:11:48 +01:00
openvpn = 292;
meguca: remove (#95920)
2020-08-21 21:00:40 +01:00
# meguca = 293; # removed 2020-08-21
nixos/hadoop: add hadoop module (hdfs, yarn)
2018-05-21 02:09:31 +01:00
yarn = 294;
hdfs = 295;
mapred = 296;
hadoop = 297;
nixos/hydron: init
2018-07-11 00:10:02 +01:00
hydron = 298;
nixos/cfssl: init - based on module originally written by @srhb - complies with available options in cfssl v1.3.2 - uid and gid 299 reserved in ids.nix - added simple nixos test case
2018-07-26 15:25:34 +01:00
cfssl = 299;
cassandra: rewrote service from scratch Adds a replacement for the previously broken `services.database.cassandra` with tests for a multi-node setup.
2017-11-07 13:11:56 +00:00
cassandra = 300;
nixos/libvirtd: add option to run qemu as non-root New option virtualisation.libvirtd.qemuRunAsRoot (default: true). If false, qemu is run as non-privileged user qemu-libvirtd, reducing security risk
2018-03-17 23:22:53 +00:00
qemu-libvirtd = 301;
systemd: added groups kvm, render they need to exist according to the README of systemd
2018-08-15 21:10:31 +01:00
kvm = 302; # default udev rules from systemd requires these
render = 303; # default udev rules from systemd requires these
nixos: add sgx group with gid 304 fix Unknown group 'sgx', ignoring message from udev
2021-12-04 23:37:43 +00:00
sgx = 304; # default udev rules from systemd requires these
initial NixOS module for LIRC
2017-11-25 21:41:19 +00:00
lirc = 305;
lidarr: init at 0.3.1.471 Fork of sonarr (as radarr) but for music instead of series and movies.
2018-09-09 11:10:04 +01:00
lidarr = 306;
nixos/slurm: run ctld as user and fix spool dir * run as user 'slurm' per default instead of root * add user/group slurm to ids.nix * fix default location for the state dir of slurmctld: (/var/spool -> /var/spool/slurmctld) * Update release notes with the above changes
2018-10-23 22:43:53 +01:00
slurm = 307;
nixos/kapacitor: new service
2018-11-01 20:52:17 +00:00
kapacitor = 308;
solr: 4.10.3 -> 7.5.0, refactor service to reflect major changes in version bump, NixOS test included
2018-11-03 17:14:13 +00:00
solr = 309;
nixos/alerta: create new module + add kapacitor integration
2018-11-08 21:34:23 +00:00
alerta = 310;
nixos/minetest fix: add missing uid/gid for minetest
2018-11-11 11:41:27 +00:00
minetest = 311;
rss2email module: init Also adding `system-sendmail` package for sharing the code with other modules or packages needing it.
2018-10-27 10:33:43 +01:00
rss2email = 312;
nixos/cockroachdb: create new service This also includes a full end-to-end CockroachDB clustering test to ensure everything basically works. However, this test is not currently enabled by default, though it can be run manually. See the included comments in the test for more information. Closes #51306. Closes #38665. Co-authored-by: Austin Seipp <aseipp@pobox.com> Signed-off-by: Austin Seipp <aseipp@pobox.com>
2018-04-10 02:16:33 +01:00
cockroachdb = 313;
zoneminder: add user for NixOS
2019-01-09 02:58:32 +00:00
zoneminder = 314;
paperless service: init
2019-01-27 14:26:31 +00:00
paperless = 315;
nixos/mailman: don't reserve a static uid in the system Any system uid will do, so we let the system allocate one for us. The 'mailman' group is gone entirely since we don't need it. Users who wish to run the 'mailman' administration utility can do so via 'sudo': $ sudo -u mailman mailman info Also, simplify the syntax of our user.users entry to rely on an attribute set rather than a list.
2019-08-30 16:55:59 +01:00
#mailman = 316; # removed 2019-08-30
nixos/zigbee2mqtt: init
2019-10-27 17:28:53 +00:00
zigbee2mqtt = 317;
nixos/update-users-groups: /etc/shadow owned by root:shadow
2020-09-24 21:28:52 +01:00
shadow = 318;
nixos/hqplayerd: init
2021-06-13 23:59:13 +01:00
hqplayer = 319;
nixos/moonraker: init
2021-07-21 03:21:03 +01:00
moonraker = 320;
nixos/distccd: init Closes: #42604
2021-08-22 05:59:17 +01:00
distcc = 321;
nixos/webdav-server-rs: init
2021-11-21 05:04:06 +00:00
webdav = 322;
nixos/pipewire: add systemWide option
2022-01-03 20:05:30 +00:00
pipewire = 323;
nixos/rstudio-server: init
2021-12-23 00:43:58 +00:00
rstudio-server = 324;
nixos/localtimed: fix service
2022-08-13 03:23:20 +01:00
localtimed = 325;
prosody: packaged as a service Conflicts: nixos/modules/misc/ids.nix
2014-09-02 16:08:56 +01:00
Fix some bad gids Issue #3727.
2015-01-05 10:58:17 +00:00
# When adding a gid, make sure it doesn't match an existing
# uid. Users and groups with the same name should have equal
# uids and gids. Also, don't use gids above 399!
4Store SPARQL endpoint: packaged svn path=/nixos/trunk/; revision=26853
2011-04-15 17:10:17 +01:00
nixos/_1password{,-gui}: use a static gid
2022-05-08 11:48:29 +01:00
# For exceptional cases where you really need a gid above 399, leave a
# comment stating why.
#
# Also, avoid the following GID ranges:
#
# 1000 - 29999: user accounts (see ../config/update-users-groups.pl)
# 30000 - 31000: nixbld users (the upper limit is arbitrarily chosen)
# 61184 - 65519: systemd DynamicUser (see systemd.exec(5))
# 65535: the error return sentinel value when uid_t was 16 bits
#
# 100000 - 6653600: subgid allocated for user namespaces
# (see ../config/update-users-groups.pl)
# 4294967294: unauthenticated user in some NFS implementations
# 4294967295: error return sentinel value
#
# References:
# https://www.debian.org/doc/debian-policy/ch-opersys.html#uid-and-gid-classes
onepassword = 31001; # 1Password requires that its GID be larger than 1000
onepassword-cli = 31002; # 1Password requires that its GID be larger than 1000
Update all legacy-style modules I.e., modules that use "require = [options]". Nowadays that should be written as { options = { ... }; config = { ... }; }; Also, use "imports" instead of "require" in places where we actually import another module.
2013-09-04 12:05:09 +01:00
users = 100;
nixbld = 30000;
nogroup = 65534;
};
* Add some groups required by the latest udev. svn path=/nixos/trunk/; revision=16667
2009-08-11 10:17:30 +01:00
* Declarative specification of user accounts. Jobs can now specify a list of user accounts that the job needs to run. For instance, the SSH daemon job says: { name = "sshd"; uid = (import ../system/ids.nix).uids.sshd; description = "SSH privilege separation user"; home = "/var/empty"; } The activation script creates the system users/groups and updates them as well. So a change in the Nix expression can be realised in /etc/{group,passwd} by running nixos-rebuild. svn path=/nixos/trunk/; revision=8846
2007-06-08 16:41:12 +01:00
};
}
Copy permalink