From cccbd177be0d538075ccceaae06a3a120c40d30a Mon Sep 17 00:00:00 2001
From: Illia Chub <illia.chub@iceinc.solutions>
Date: Thu, 23 Dec 2021 09:26:09 +0200
Subject: [PATCH] Added common access layer for internal services

---
 files.nix | 5 +++--
 users.nix | 5 +++++
 2 files changed, 8 insertions(+), 2 deletions(-)

diff --git a/files.nix b/files.nix
index c39066b..46bbac8 100644
--- a/files.nix
+++ b/files.nix
@@ -22,9 +22,10 @@ in
       '';
     in
     [
-      (if cfg.bitwarden.enable then "d /var/lib/bitwarden 0777 bitwarden_rs bitwarden_rs -" else "")
-      (if cfg.bitwarden.enable then "d /var/lib/bitwarden/backup 0777 bitwarden_rs bitwarden_rs -" else "")
+      (if cfg.bitwarden.enable then "d /var/lib/bitwarden 0777 vaultwarden vaultwarden -" else "")
+      (if cfg.bitwarden.enable then "d /var/lib/bitwarden/backup 0777 vaultwarden vaultwarden -" else "")
       (if cfg.pleroma.enable then "d /var/lib/pleroma 0700 pleroma pleroma - -" else "")
+      "d /var 0740 root shared - -"
       "d /var/lib/restic 0700 restic - - -"
       "f+ /var/lib/restic/pass 0400 restic - - ${resticPass}"
       "f+ /root/.config/rclone/rclone.conf 0400 root root - ${rcloneConfig}"
diff --git a/users.nix b/users.nix
index a3128b2..8812f8e 100644
--- a/users.nix
+++ b/users.nix
@@ -21,5 +21,10 @@ in
         };
       })
       cfg.users);
+    groups = {
+      shared = {
+        members = [ "restic" ];
+      };
+    };  
   };
 }