nixos/nomad: add assertion for the value of dropPrivileges and its relation to data_dir

2021-01-23 19:44:37 -05:00
parent 5105bf4b2e
commit 3e00482ba8
1 changed files with 7 additions and 0 deletions
@@ -135,6 +135,13 @@ in
      };
    };

+    assertions = [
+      {
+        assertion = cfg.dropPrivileges -> cfg.settings.data_dir == "/var/lib/nomad";
+        message = "settings.data_dir must be equal to \"/var/lib/nomad\" if dropPrivileges is true";
+      }
+    ];
+
    # Docker support requires the Docker daemon to be running.
    virtualisation.docker.enable = mkIf cfg.enableDocker true;
  };