moving docker secrets to sops

2024-06-21 21:27:22 -04:00
parent 776ae1c811
commit ae21d96746
5 changed files with 75 additions and 7 deletions
--- a/systems/jeeves/docker/default.nix
+++ b/systems/jeeves/docker/default.nix
@ -6,5 +6,17 @@
    ./postgresql.nix
  ];

+  users = {
+    users.docker-service = {
+      isSystemUser = true;
+      group = "docker-service";
+      extraGroups = [ "docker" ];
+      uid = 600;
+    };
+    groups.docker-service = {
+      gid = 600;
+    };
+  };
+
  virtualisation.oci-containers.backend = "docker";
 }