From 53042eb3e8881bcbdc71727c50a74f7684b68996 Mon Sep 17 00:00:00 2001 From: "Rune K. Svendsen" Date: Fri, 25 Feb 2022 11:17:32 +0100 Subject: [PATCH] Add socketGroup option to cardano-node-service --- nix/nixos/cardano-node-service.nix | 12 +++++++++++- 1 file changed, 11 insertions(+), 1 deletion(-) diff --git a/nix/nixos/cardano-node-service.nix b/nix/nixos/cardano-node-service.nix index b3e4be51431..0707430ef61 100644 --- a/nix/nixos/cardano-node-service.nix +++ b/nix/nixos/cardano-node-service.nix @@ -359,6 +359,16 @@ in { ''; }; + socketGroup = mkOption { + type = types.str; + default = "cardano-node"; + description = '' + systemd socket group owner. + Note: only applies to sockets created by systemd + (ie. when `systemdSocketActivation` is turned on). + ''; + }; + systemdSocketActivation = mkOption { type = types.bool; default = false; @@ -678,7 +688,7 @@ in { ReusePort = "yes"; SocketMode = "0660"; SocketUser = "cardano-node"; - SocketGroup = "cardano-node"; + SocketGroup = cfg.socketGroup; FreeBind = "yes"; }; } (cfg.extraSocketConfig i)));