From f3d4d24d6b205ebbef293bfe4ddba3b9e8372129 Mon Sep 17 00:00:00 2001 From: Shea Levy Date: Wed, 27 Feb 2013 09:25:37 -0500 Subject: [PATCH] dd-agent: Run as a separate user --- modules/services/monitoring/dd-agent.nix | 16 +++++++++++++++- 1 file changed, 15 insertions(+), 1 deletion(-) diff --git a/modules/services/monitoring/dd-agent.nix b/modules/services/monitoring/dd-agent.nix index c6ab1ca0a3a..f2527ea4e39 100644 --- a/modules/services/monitoring/dd-agent.nix +++ b/modules/services/monitoring/dd-agent.nix @@ -43,6 +43,14 @@ in { config = mkIf cfg.enable { environment.etc = [ { source = datadog-conf; target = "dd-agent/datadog.conf"; } ]; + users.extraUsers."dd-agent" = { + description = "Datadog Agent User"; + + group = "dd-agent"; + }; + + users.extraGroups."dd-agent" = { }; + systemd.services.dd-agent = { description = "Datadog agent monitor"; @@ -50,7 +58,13 @@ in { wantedBy = [ "multi-user.target" ]; - serviceConfig.ExecStart = "${pkgs.dd-agent}/bin/dd-agent foreground"; + serviceConfig = { + ExecStart = "${pkgs.dd-agent}/bin/dd-agent foreground"; + + User = "dd-agent"; + + Group = "dd-agent"; + }; restartTriggers = [ pkgs.dd-agent ]; };