From e4cdf3a3a19d74f283ef13aed8b7e1e6073835e3 Mon Sep 17 00:00:00 2001
From: Luflosi <luflosi@luflosi.de>
Date: Mon, 4 Dec 2023 16:47:23 +0100
Subject: [PATCH] nixos/kubo: only set programs.fuse.userAllowOther if required

If `services.kubo.settings.Mounts.FuseAllowOther` is set to `false`, we don't need to set `programs.fuse.userAllowOther` to `true`.
---
 nixos/modules/services/network-filesystems/kubo.nix | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/nixos/modules/services/network-filesystems/kubo.nix b/nixos/modules/services/network-filesystems/kubo.nix
index 9f3d4cb0e88a..b2eeeb224e10 100644
--- a/nixos/modules/services/network-filesystems/kubo.nix
+++ b/nixos/modules/services/network-filesystems/kubo.nix
@@ -339,7 +339,7 @@ in
     boot.kernel.sysctl."net.core.rmem_max" = lib.mkDefault 2500000;
     boot.kernel.sysctl."net.core.wmem_max" = lib.mkDefault 2500000;
 
-    programs.fuse = lib.mkIf cfg.autoMount {
+    programs.fuse = lib.mkIf (cfg.autoMount && cfg.settings.Mounts.FuseAllowOther) {
       userAllowOther = true;
     };