From 9facb7078b346b2e7805e73d0d660ee3db007473 Mon Sep 17 00:00:00 2001 From: Rickard Nilsson Date: Fri, 1 Jul 2016 18:01:52 +0200 Subject: [PATCH] nixos/elasticsearch: Set a group on the user This fixed a problem I had when running ElasticSearch in an LXC container, and it doesn't hurt using a dedicated group instead of nogroup anyway. --- nixos/modules/misc/ids.nix | 2 +- nixos/modules/services/search/elasticsearch.nix | 13 ++++++++----- 2 files changed, 9 insertions(+), 6 deletions(-) diff --git a/nixos/modules/misc/ids.nix b/nixos/modules/misc/ids.nix index 8da421447624..581cd4fb631f 100644 --- a/nixos/modules/misc/ids.nix +++ b/nixos/modules/misc/ids.nix @@ -370,7 +370,7 @@ quassel = 89; amule = 90; minidlna = 91; - #elasticsearch = 92; # unused + elasticsearch = 92; #tcpcryptd = 93; # unused connman = 94; firebird = 95; diff --git a/nixos/modules/services/search/elasticsearch.nix b/nixos/modules/services/search/elasticsearch.nix index 17ac8fe7e245..9299aaac2f70 100644 --- a/nixos/modules/services/search/elasticsearch.nix +++ b/nixos/modules/services/search/elasticsearch.nix @@ -157,11 +157,14 @@ in { environment.systemPackages = [ cfg.package ]; - users.extraUsers = singleton { - name = "elasticsearch"; - uid = config.ids.uids.elasticsearch; - description = "Elasticsearch daemon user"; - home = cfg.dataDir; + users = { + groups.elasticsearch.gid = config.ids.gids.elasticsearch; + users.elasticsearch = { + uid = config.ids.uids.elasticsearch; + description = "Elasticsearch daemon user"; + home = cfg.dataDir; + group = "elasticsearch"; + }; }; }; }