summary refs log tree commit diff
path: root/nixos/modules/services/security
diff options
context:
space:
mode:
authorBen Wolsieffer <benwolsieffer@gmail.com>2018-08-21 16:21:11 -0400
committerBen Wolsieffer <benwolsieffer@gmail.com>2018-08-21 16:24:31 -0400
commitc6191c8abff1d3eef083619ee34b8bc60cba79ff (patch)
tree8f9f6a650f002bdb9766a7e557e124bec65bcfb0 /nixos/modules/services/security
parent8395f9aa85e621c076334a67d814de8221ce7983 (diff)
downloadnixlib-c6191c8abff1d3eef083619ee34b8bc60cba79ff.tar
nixlib-c6191c8abff1d3eef083619ee34b8bc60cba79ff.tar.gz
nixlib-c6191c8abff1d3eef083619ee34b8bc60cba79ff.tar.bz2
nixlib-c6191c8abff1d3eef083619ee34b8bc60cba79ff.tar.lz
nixlib-c6191c8abff1d3eef083619ee34b8bc60cba79ff.tar.xz
nixlib-c6191c8abff1d3eef083619ee34b8bc60cba79ff.tar.zst
nixlib-c6191c8abff1d3eef083619ee34b8bc60cba79ff.zip
nixos/cfssl: don't create user/group unless service is enabled
Diffstat (limited to 'nixos/modules/services/security')
-rw-r--r--nixos/modules/services/security/cfssl.nix4
1 files changed, 2 insertions, 2 deletions
diff --git a/nixos/modules/services/security/cfssl.nix b/nixos/modules/services/security/cfssl.nix
index 1eb2f65ba602..ee6d5d91fe15 100644
--- a/nixos/modules/services/security/cfssl.nix
+++ b/nixos/modules/services/security/cfssl.nix
@@ -146,7 +146,7 @@ in {
     };
   };
 
-  config = {
+  config = mkIf cfg.enable {
     users.extraGroups.cfssl = {
       gid = config.ids.gids.cfssl;
     };
@@ -159,7 +159,7 @@ in {
       uid = config.ids.uids.cfssl;
     };
 
-    systemd.services.cfssl = mkIf cfg.enable {
+    systemd.services.cfssl = {
       description = "CFSSL CA API server";
       wantedBy = [ "multi-user.target" ];
       after = [ "network.target" ];