42 lines
748 B
Nix
42 lines
748 B
Nix
|
{ pkgs, ... }:
|
||
|
|
let
|
||
|
|
home = "/var/lib/zulip";
|
||
|
|
in
|
||
|
|
{
|
||
|
|
imports = [ ./postgres.nix ./nginx.nix ];
|
||
|
|
|
||
|
|
# profile/base.pp
|
||
|
|
users = {
|
||
|
|
groups.zulip = { };
|
||
|
|
users.zulip = {
|
||
|
|
isSystemUser = true;
|
||
|
|
group = "zulip";
|
||
|
|
inherit home;
|
||
|
|
homeMode = "755";
|
||
|
|
};
|
||
|
|
};
|
||
|
|
|
||
|
|
systemd = {
|
||
|
|
tmpfiles.rules = [
|
||
|
|
''f ${home}/zulip.conf 644 zulip zulip ""''
|
||
|
|
''f ${home}/settings.py 644 zulip zulip ""''
|
||
|
|
''f ${home}/zulip-secrets.conf 640 zulip zulip ""''
|
||
|
|
];
|
||
|
|
};
|
||
|
|
|
||
|
|
#security.pam.loginLimits = [
|
||
|
|
# {
|
||
|
|
# domain = "zulip";
|
||
|
|
# type = "soft";
|
||
|
|
# item = "nofile";
|
||
|
|
# value = "1000000";
|
||
|
|
# }
|
||
|
|
# {
|
||
|
|
# domain = "zulip";
|
||
|
|
# type = "hard";
|
||
|
|
# item = "nofile";
|
||
|
|
# value = "1048576";
|
||
|
|
# }
|
||
|
|
#];
|
||
|
|
}
|