bitcoind: rename group bitcoinrpc -> bitcoinrpc-public
This makes it clear that services with this group can only use public RPC calls.
This commit is contained in:
@@ -384,13 +384,13 @@ in {
|
||||
|
||||
users.users.${cfg.user}.group = cfg.group;
|
||||
users.groups.${cfg.group} = {};
|
||||
users.groups.bitcoinrpc = {};
|
||||
users.groups.bitcoinrpc-public = {};
|
||||
nix-bitcoin.operator.groups = [ cfg.group ];
|
||||
|
||||
nix-bitcoin.secrets.bitcoin-rpcpassword-privileged.user = cfg.user;
|
||||
nix-bitcoin.secrets.bitcoin-rpcpassword-public = {
|
||||
user = cfg.user;
|
||||
group = "bitcoinrpc";
|
||||
group = "bitcoinrpc-public";
|
||||
};
|
||||
|
||||
nix-bitcoin.secrets.bitcoin-HMAC-privileged.user = cfg.user;
|
||||
|
||||
Reference in New Issue
Block a user