nixos/dnscrypt-wrapper: fix rotate script failing to restart the service

This commit is contained in:
rnhmjoj 2018-01-05 02:33:11 +01:00
parent c01cfb9e01
commit c883311327
No known key found for this signature in database
GPG key ID: 91BE884FBA4B591A

View file

@ -145,6 +145,16 @@ in {
};
users.groups.dnscrypt-wrapper = { };
security.polkit.extraConfig = ''
// Allow dnscrypt-wrapper user to restart dnscrypt-wrapper.service
polkit.addRule(function(action, subject) {
if (action.id == "org.freedesktop.systemd1.manage-units" &&
action.lookup("unit") == "dnscrypt-wrapper.service" &&
subject.user == "dnscrypt-wrapper") {
return polkit.Result.YES;
}
});
'';
systemd.services.dnscrypt-wrapper = {
description = "dnscrypt-wrapper daemon";