nixos/services
ediblerope 3819cb6820 locale + crowdsec: pin timezone, declare static crowdsec user
Two failing services after the channel switch.

automatic-timezoned has been polkit-blocked since well before the
switch — replace with a static Europe/London timezone. Hosts that
travel can override locally if needed.

The vendored crowdsec module's setup unit chowns its config dir to
the (DynamicUser-allocated) crowdsec user via an ExecStartPre+ hack.
On stable's systemd the dynamic user isn't visible to chown via NSS
at that point, so it fails with 'invalid user'. Declaring crowdsec
as a static system user makes systemd use it (DynamicUser becomes a
no-op) and the chown resolves cleanly.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
2026-04-29 14:00:41 +01:00
..
adguard.nix router: phase-2 cleanup + camera DHCP reservation 2026-04-24 10:52:11 +01:00
arr-interconnect.nix arr-interconnect: drop manual 1080p quality floors 2026-04-29 10:31:17 +01:00
authelia.nix 2026-04-24 13:39:32 +01:00
bazarr.nix Force UMask=0002 on Radarr, Sonarr, Bazarr 2026-04-16 20:22:37 +01:00
cloudflare-ddns.md Update docs: add new services to readme, remove obsolete go2rtc-readme 2026-04-07 20:42:19 +01:00
cloudflare-ddns.nix Update cloudflare-ddns.nix 2026-02-15 09:06:23 +02:00
crowdsec.nix locale + crowdsec: pin timezone, declare static crowdsec user 2026-04-29 14:00:41 +01:00
game-servers.nix 7dtd-coop: START_MODE=1 (Start), not 2 (Update+STOP) 2026-04-25 19:51:32 +01:00
go2rtc.nix Fix go2rtc: use RuntimeDirectory instead of mkdir /run/go2rtc 2026-04-07 20:51:22 +01:00
homepage.nix flake: split mediaserver onto nixos-25.11, keep desktops on unstable 2026-04-29 13:26:07 +01:00
jellyfin.nix Force Jellyfin UMask=0002 to override new nixpkgs default 2026-04-16 20:20:01 +01:00
nginx.nix qbit: fix CSRF-loop behind Authelia + self-heal data-dir ownership 2026-04-24 20:04:04 +01:00
prowlarr.nix Update prowlarr.nix 2026-01-22 10:49:01 +00:00
qbittorrent-nox.nix qbit: fix CSRF-loop behind Authelia + self-heal data-dir ownership 2026-04-24 20:04:04 +01:00
radarr.nix Force UMask=0002 on Radarr, Sonarr, Bazarr 2026-04-16 20:22:37 +01:00
recyclarr.nix recyclarr: add weekly TRaSH-Guide profile sync for Sonarr & Radarr 2026-04-29 10:31:09 +01:00
router.nix router: rename nat table to router-nat so Docker's chains survive rebuilds 2026-04-26 19:43:33 +01:00
server-permissions.nix Reorganise hardware vs host config, tidy settings and services 2026-04-01 21:16:59 +01:00
sonarr.nix Force UMask=0002 on Radarr, Sonarr, Bazarr 2026-04-16 20:22:37 +01:00