nixos/zigbee2mqtt: run as zigbee2mqtt group

Not setting a group is a security defect, since that will run the unit
under the root group.

Fixes: 1af87596 ("nixos/zigbee2mqtt: init")
This commit is contained in:
Martin Weinelt
2021-12-06 18:30:01 +01:00
committed by Simon Weber
parent f277b0945e
commit 96d69e40f2
@@ -79,6 +79,7 @@ in
serviceConfig = {
ExecStart = "${cfg.package}/bin/zigbee2mqtt";
User = "zigbee2mqtt";
Group = "zigbee2mqtt";
WorkingDirectory = cfg.dataDir;
Restart = "on-failure";