Add user, group, and extraServiceConfig to erigon module

litxio · Apr 1, 2024 · 2311874 · 2311874
1 parent d8511b1
commit 2311874
Show file tree

Hide file tree

Showing 2 changed files with 29 additions and 1 deletion.
diff --git a/modules/erigon/default.nix b/modules/erigon/default.nix
@@ -116,7 +116,6 @@ in {
               serviceConfig = mkMerge [
                 baseServiceConfig
                 {
-                  User = serviceName;
                   StateDirectory = serviceName;
                   ExecStartPre =
                     mkIf (cfg.subVolume && cfg.args.datadir == null) (mkBefore [
@@ -126,9 +125,20 @@ in {
                   ReadWritePaths =
                     mkIf (cfg.args.datadir != null) cfg.args.datadir;
                 }
+                (mkIf (cfg.user == null) {
+                  User = serviceName;
+                })
+                (mkIf (cfg.user != null) {
+                  DynamicUser = false;
+                  User = cfg.user;
+                })
+                (mkIf (cfg.group != null) {
+                  Group = cfg.group;
+                })
                 (mkIf (cfg.args.authrpc.jwtsecret != null) {
                   LoadCredential = ["jwt-secret:${cfg.args.authrpc.jwtsecret}"];
                 })
+                cfg.extraServiceConfig
               ];
             })
       )

diff --git a/modules/erigon/options.nix b/modules/erigon/options.nix
@@ -39,6 +39,24 @@
         default = false;
         description = lib.mdDoc "Open ports in the firewall for any enabled networking services";
       };
+
+      user = mkOption {
+        type = types.nullOr types.str;
+        default = null;
+        description = mdDoc "User to run the systemd service.";
+      };
+
+      group = mkOption {
+        type = types.nullOr types.str;
+        default = null;
+        description = mdDoc "Primary group for the systemd service.";
+      };
+
+      extraServiceConfig = mkOption {
+        type = types.attrsOf types.str;
+        default = {};
+        description = mdDoc "Extra settings for the systemd [Service] stanza.";
+      };
     };
   };
 in {