diff options
| author | rnhmjoj <rnhmjoj@inventati.org> | 2023-09-03 23:02:18 +0200 |
|---|---|---|
| committer | rnhmjoj <rnhmjoj@inventati.org> | 2023-09-04 00:40:50 +0200 |
| commit | 9e0457115e7eb3f106b9ea60ab3ca92daed5b03f (patch) | |
| tree | e06557a3c70d0bd0607b010af09125d6814c3381 /pkgs/development/python-modules/python-mapnik | |
| parent | e932745cb865454a3c97c846a35f8ec02d73c61d (diff) | |
nixos/mautrix-whatsapp: use static user and group
The DynamicUser mechanism does not allow share the bridge
registration.yaml file with matrix-synapse in any easy way:
1. the mautrix-whatsapp group under which the service runs is not in
/etc/group, so you can't add matrix-synapse to this.
This makes the group read bit on the file useless as the group is
effectively always empty.
2. It's not possible to use ACLs or copy the file during preStart or
postStart because the commands are executed with low priviledges.
By using a normal (static) user/group the secret can be shared with
synapse as follows:
services.matrix_synapse.settings.app_service_config_files =
[ "/var/lib/mautrix-whatsapp/whatsapp-registration.yaml" ];
users.users.matrix-synapse.extraGroups = [ "mautrix-whatsapp" ];
Diffstat (limited to 'pkgs/development/python-modules/python-mapnik')
0 files changed, 0 insertions, 0 deletions
