aboutsummaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorIgor Pashev <pashev.igor@gmail.com>2018-04-02 21:27:45 +0300
committerIgor Pashev <pashev.igor@gmail.com>2018-04-02 21:27:48 +0300
commit132b8b7aae875a4fd8bf8388dedcd29e422c0893 (patch)
treea2e03cb3c3cd5dac428d517e873c9c8d0ac34d5d
parentb74fbbf564d822f0b1ec61e86f09f594b7e7698b (diff)
downloadnixsap-132b8b7aae875a4fd8bf8388dedcd29e422c0893.tar.gz
icinga2: remove RunAsGroup/RunAsUser
Gone in Icinga2 2.8.2 Icinga is started as non-root user anyway.
-rw-r--r--modules/apps/icinga2.nix3
1 files changed, 1 insertions, 2 deletions
diff --git a/modules/apps/icinga2.nix b/modules/apps/icinga2.nix
index 407dbda..6380f92 100644
--- a/modules/apps/icinga2.nix
+++ b/modules/apps/icinga2.nix
@@ -94,8 +94,6 @@ let
icingaConf = pkgs.writeText "icinga2.conf"
''
const PluginDir = "${pkgs.monitoringPlugins}/libexec"
- const RunAsGroup = "${cfg.user}"
- const RunAsUser = "${cfg.user}"
include <itl>
include <plugins>
@@ -341,6 +339,7 @@ in {
nixsap.system.groups = [ cfg.commandGroup ];
nixsap.deployment.keyrings.${cfg.user} = filter (hasPrefix config.nixsap.deployment.keyStore) cfg.configFiles;
users.users.${cfg.user}.extraGroups = [ "proc" ];
+
systemd.services.icinga2 = {
description = "Icinga2 daemon";
after = [ "local-fs.target" "keys.target" "network.target" ];