privoxy service: remove static uid

The service owns no data, having a static uid serves no purpose.

This frees up uid/gid 32
This commit is contained in:
Joachim Fasting
2016-12-05 13:37:08 +01:00
parent ad88f1040e
commit 3dcdc2d2b0
2 changed files with 9 additions and 11 deletions
@@ -6,8 +6,6 @@ let
inherit (pkgs) privoxy;
privoxyUser = "privoxy";
cfg = config.services.privoxy;
confFile = pkgs.writeText "privoxy.conf" ''
@@ -88,18 +86,20 @@ in
###### implementation
config = mkIf cfg.enable {
users.extraUsers = singleton
{ name = privoxyUser;
uid = config.ids.uids.privoxy;
description = "Privoxy daemon user";
};
users.users.privoxy = {
isSystemUser = true;
home = "/var/empty";
group = "privoxy";
};
users.groups.privoxy = {};
systemd.services.privoxy = {
description = "Filtering web proxy";
after = [ "network.target" "nss-lookup.target" ];
wantedBy = [ "multi-user.target" ];
serviceConfig.ExecStart = "${privoxy}/sbin/privoxy --no-daemon --user ${privoxyUser} ${confFile}";
serviceConfig.ExecStart = "${privoxy}/bin/privoxy --no-daemon --user privoxy ${confFile}";
serviceConfig.PrivateDevices = true;
serviceConfig.PrivateTmp = true;