nixos/zigbee2mqtt: run as zigbee2mqtt group

Not setting a group is a security defect, since that will run the unit
under the root group.

Fixes: 1af87596 ("nixos/zigbee2mqtt: init")
This commit is contained in:
Martin Weinelt 2021-12-05 21:16:39 +01:00 committed by Simon Weber
parent f277b0945e
commit 96d69e40f2

View File

@ -79,6 +79,7 @@ in
serviceConfig = {
ExecStart = "${cfg.package}/bin/zigbee2mqtt";
User = "zigbee2mqtt";
Group = "zigbee2mqtt";
WorkingDirectory = cfg.dataDir;
Restart = "on-failure";