Lots of user changes and also Spacebar

modules/system/services/server/fileserver/jellyfin/default.nix

@@ -1,6 +1,9 @@
 { config, lib, ... }:
 {
-  imports = [ ./nginx ];
+  imports = [
+    ./nginx
+    ./user
+  ];
 
   config = lib.mkIf config.system.fileserver.enable {
     services.jellyfin.enable = true;

modules/system/services/server/fileserver/jellyfin/nginx/default.nix

@@ -1,6 +1,6 @@
 { config, lib, ... }:
 {
-  services.nginx.virtualHosts."jelly.nixfox.ca" = lib.mkIf config.services.forgejo.enable {
+  services.nginx.virtualHosts."jelly.nixfox.ca" = lib.mkIf config.services.jellyfin.enable {
     enableACME = true;
     forceSSL = true;
     locations."/" = {

modules/system/services/server/fileserver/jellyfin/user/default.nix

@@ -0,0 +1,12 @@
+{ config, lib, ... }:
+{
+  users = lib.mkIf config.services.jellyfin.enable {
+    users.jellyfin = {
+      group = "jellyfin";
+      extraGroups = [ "nfsShare" ];
+      isSystemUser = true;
+      uid = 983;
+    };
+    groups.jellyfin = {};
+  };
+}

modules/system/services/server/fileserver/nextcloud/default.nix

@@ -1,6 +1,9 @@
 { config, lib, pkgs, ... }:
 {
-  imports = [ ./nginx ];
+  imports = [
+    ./nginx
+    ./user
+  ];
 
   config = lib.mkIf config.system.fileserver.enable {
     services.nextcloud = {

modules/system/services/server/fileserver/nextcloud/user/default.nix

@@ -0,0 +1,12 @@
+{ config, lib, ... }:
+{
+  users = lib.mkIf config.services.nextcloud.enable {
+    users.nextcloud = {
+      group = "nextcloud";
+      extraGroups = [ "nfsShare" ];
+      isSystemUser = true;
+      uid = 218;
+    };
+    groups.nextcloud = {};
+  };
+}

modules/system/services/server/icecast/liquidsoap/default.nix

@@ -3,5 +3,6 @@
   imports = [
     ./nixbops
     ./nixscrap
+    ./user
   ];
 }

modules/system/services/server/icecast/liquidsoap/user/default.nix

@@ -0,0 +1,12 @@
+{ config, lib, ... }:
+{
+  users = lib.mkIf config.services.icecast.enable {
+    users.liquidsoap = {
+      group = "liquidsoap";
+      extraGroups = [ "nginx" ];
+      isSystemUser = true;
+      uid = 155;
+    };
+    groups.liquidsoap = {};
+  };
+}

modules/system/services/server/socialserver/default.nix

@@ -3,7 +3,7 @@
   imports = [
     ./mastodon
     ./owncast
-    #./spacebar
+    ./spacebar
   ];
 
   options.system.socialserver.enable = lib.mkEnableOption "Enable social media like services";

modules/system/services/server/socialserver/spacebar/default.nix

@@ -0,0 +1,25 @@
+{ config, lib, pkgs, spacebar, ... }:
+{
+  imports = [
+    #./nginx
+    ./user
+  ];
+
+  config = lib.mkIf config.system.socialserver.enable {
+    systemd.services.spacebar-server = {
+      enable = true;
+      description = "Spacebar Chat Server";
+      documentation = [ "https://docs.spacebar.chat/" ];
+      path = [ spacebar.packages.${pkgs.system}.default ];
+      wantedBy = [ "multi-user.target" ];
+      after = [ "network.target" ];
+      serviceConfig = {
+        WorkingDirectory = "/var/lib/spacebar";
+        ExecStart = "start-bundle";
+        Restart = "always";
+        User = "spacebar";
+      };
+    };
+    environment.persistence."/persist".directories = [ config.systemd.services.spacebar-server.serviceConfig.WorkingDirectory ];
+  };
+}

modules/system/services/server/socialserver/spacebar/user/default.nix

@@ -0,0 +1,11 @@
+{ config, lib, ... }:
+{
+  users = lib.mkIf config.system.socialserver.enable {
+    users.spacebar = {
+      group = "spacebar";
+      isSystemUser = true;
+      uid = 138;
+    };
+    groups.spacebar = {};
+  };
+}

modules/system/services/server/webserver/nginx/default.nix

@@ -2,6 +2,7 @@
 {
   imports = [
     ./rtmp
+    ./user
     ./virtualhosts
   ];
 

modules/system/services/server/webserver/nginx/user/default.nix

@@ -0,0 +1,15 @@
+{ config, lib, ... }:
+{
+  users = lib.mkIf config.services.nginx.enable {
+    users.nginx = {
+      group = "nginx";
+      extraGroups = [
+        "turnserver"
+        "virtualMail"
+      ];
+      isSystemUser = true;
+      uid = 60;
+    };
+    groups.nginx = {};
+  };
+}