diff options
| author | Martin Weinelt <mweinelt@users.noreply.github.com> | 2023-07-28 12:05:15 +0200 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2023-07-28 12:05:15 +0200 |
| commit | d6760b897a91e54d248b8a433ad88763afff142a (patch) | |
| tree | 9b1a8d4b92a290362e78d02338b25b667992ec4e | |
| parent | Merge pull request #245770 from erictapen/23.05/mastodon (diff) | |
| parent | nixos/frigate: fix recording and serving of clips/recordings (diff) | |
| download | nixpkgs-d6760b897a91e54d248b8a433ad88763afff142a.tar.gz | |
Merge pull request #245851 from NixOS/backport-245759-to-release-23.05
[Backport release-23.05] nixos/frigate: fix recording and serving of clips/recordings
| -rw-r--r-- | nixos/modules/services/video/frigate.nix | 17 |
1 files changed, 15 insertions, 2 deletions
diff --git a/nixos/modules/services/video/frigate.nix b/nixos/modules/services/video/frigate.nix index 217637cbebcf..8db2bfae80ac 100644 --- a/nixos/modules/services/video/frigate.nix +++ b/nixos/modules/services/video/frigate.nix @@ -322,6 +322,16 @@ in ''; }; + systemd.services.nginx.serviceConfig.SupplementaryGroups = [ + "frigate" + ]; + + users.users.frigate = { + isSystemUser = true; + group = "frigate"; + }; + users.groups.frigate = {}; + systemd.services.frigate = { after = [ "go2rtc.service" @@ -349,15 +359,18 @@ in serviceConfig = { ExecStart = "${cfg.package.python.interpreter} -m frigate"; - DynamicUser = true; User = "frigate"; + Group = "frigate"; + + UMask = "0027"; StateDirectory = "frigate"; - UMask = "0077"; + StateDirectoryMode = "0750"; # Caches PrivateTmp = true; CacheDirectory = "frigate"; + CacheDirectoryMode = "0750"; BindPaths = [ "/migrations:${cfg.package}/share/frigate/migrations:ro" |