harald/nixcfg
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

feat(nix): improve Nextcloud Claude Bot security and user setup

Browse source 
- Set `User` and `Group` for the bot service to enhance security and isolation.
- Added system user and group for `claude-bot` with defined home directory.
- Modified secrets ownership to align with the new bot user.
This commit is contained in:
Harald Hoyer 2026-02-03 16:14:21 +01:00
parent b1370b5fc6
commit d5967cf392
2 changed files with 16 additions and 5 deletions
Download patch file Download diff file Expand all files Collapse all files

1
systems/x86_64-linux/mx/nextcloud-claude-bot/default.nix
View file

@ -12,6 +12,7 @@
sops.secrets."nextcloud-claude-bot/secret" = {
sopsFile = ../../../../.secrets/hetzner/nextcloud-claude-bot.yaml;
restartUnits = [ "nextcloud-claude-bot.service" ];
owner = "claude-bot";
};
# Nginx location for Nextcloud to send webhooks to the bot