28 lines
591 B
Nix
28 lines
591 B
Nix
|
{ pkgs
|
||
|
|
, lib
|
||
|
|
, config
|
||
|
|
, ... }: with lib; let
|
||
|
|
cfg = config.users;
|
||
|
|
in {
|
||
|
|
options.users.home.persistApp = {
|
||
|
|
files = mkOption {
|
||
|
|
type = with types; listOf (oneOf [ str (attrsOf str) ]);
|
||
|
|
default = [ ];
|
||
|
|
};
|
||
|
|
directories = mkOption {
|
||
|
|
type = with types; listOf (oneOf [ str (attrsOf str) ]);
|
||
|
|
default = [ ];
|
||
|
|
};
|
||
|
|
};
|
||
|
|
|
||
|
|
config = {
|
||
|
|
users.profiles.app = {
|
||
|
|
uid = 5800;
|
||
|
|
description = "Insecure Applications";
|
||
|
|
};
|
||
|
|
|
||
|
|
# extra persistence specific to the app user
|
||
|
|
environment.persistence."/nix/persist".users.app = cfg.home.persistApp;
|
||
|
|
};
|
||
|
|
}
|