3
0
Fork 0
forked from mirrors/nixpkgs

nixos/nomad: only set User if privileges are dropped

This commit is contained in:
Phillip Cloud 2021-01-23 18:20:17 -05:00
parent de71f5b506
commit 2a3cb407b0

View file

@ -137,7 +137,7 @@ in
Restart = "on-failure";
RestartSec = 2;
TasksMax = "infinity";
User = "nomad";
User = optionalString cfg.dropPrivileges "nomad";
}
(mkIf cfg.enableDocker {
SupplementaryGroups = "docker"; # space-separated string