From ec4855d30164f89a8f170da66f64e0a5e49a2a2d Mon Sep 17 00:00:00 2001
From: Kjetil Orbekk <kj@orbekk.com>
Date: Sun, 16 May 2021 11:58:18 -0400
Subject: allow nextcloud readonly access to storage

---
 machines/dragon.nix   | 2 +-
 modules/nextcloud.nix | 2 ++
 2 files changed, 3 insertions(+), 1 deletion(-)

diff --git a/machines/dragon.nix b/machines/dragon.nix
index 6b23443..b11355b 100644
--- a/machines/dragon.nix
+++ b/machines/dragon.nix
@@ -20,7 +20,7 @@ in
   environment.systemPackages = with pkgs; [ ipmitool ];
   programs.mosh.enable = true;
 
-  orbekk.valheim-server.enable = true;
+  orbekk.valheim-server.enable = false;
   orbekk.valheim-server.programDir = "/opt/valheim";
 
   virtualisation.lxd.enable = true;
diff --git a/modules/nextcloud.nix b/modules/nextcloud.nix
index 282fb3b..f6f9d1a 100644
--- a/modules/nextcloud.nix
+++ b/modules/nextcloud.nix
@@ -36,6 +36,8 @@ in
       ];
     };
 
+    users.extraUsers.nextcloud.extraGroups = ["readonly"];
+
     systemd.services."nextcloud-setup" = {
       requires = ["postgresql.service"];
       after = ["postgresql.service"];
-- 
cgit v1.2.3