services/unbound: use u/gname instead of u/gid
This commit is contained in:
parent
a76b82cbcc
commit
59a48fc8bb
1 changed files with 2 additions and 4 deletions
|
|
@ -1,14 +1,12 @@
|
||||||
{ config, inputs, ... }:
|
{ inputs, ... }:
|
||||||
let
|
let
|
||||||
dir = "/persist/unbound";
|
dir = "/persist/unbound";
|
||||||
uid = toString config.ids.uids.unbound;
|
|
||||||
gid = toString config.ids.gids.unbound;
|
|
||||||
in {
|
in {
|
||||||
networking.firewall.interfaces.wlan0 = {
|
networking.firewall.interfaces.wlan0 = {
|
||||||
allowedUDPPorts = [ 53 ];
|
allowedUDPPorts = [ 53 ];
|
||||||
allowedTCPPorts = [ 53 ];
|
allowedTCPPorts = [ 53 ];
|
||||||
};
|
};
|
||||||
systemd.tmpfiles.rules = [ "d ${dir} 700 ${uid} ${gid}" ];
|
systemd.tmpfiles.rules = [ "d ${dir} 700 unbound unbound" ];
|
||||||
|
|
||||||
services.unbound = {
|
services.unbound = {
|
||||||
enable = true;
|
enable = true;
|
||||||
|
|
|
||||||
Loading…
Add table
Add a link
Reference in a new issue