etorres/nixos
0
0
Fork 0
Code Issues 3 Pull Requests Actions Packages Projects Releases Wiki Activity

roles/dockerserver: use SupplementaryGroups instead of changing traefik group

Browse Source
This commit is contained in:
Eric Torres
2025-10-15 21:05:31 -07:00
parent 86c9d43619
commit 684e5daf54
1 changed files with 1 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
roles/dockerserver.nix
View File

@@ -37,11 +37,10 @@ in
network = dockerTraefikNetwork; network = dockerTraefikNetwork;
watch = true; watch = true;
}; };
group = "docker";
}; };
systemd.services.traefik.serviceConfig = mkIf config.services.traefik.enable { systemd.services.traefik.serviceConfig = mkIf config.services.traefik.enable {
SupplementaryGroups = [ "docker" ];
BindReadOnlyPaths = [ dockerSocketPath ]; BindReadOnlyPaths = [ dockerSocketPath ];
}; };
}; };