refactor(tente): set www-data as an extra group

Log files shouldn't be owned by www-data.

1 files changed, 7 insertions, 1 deletions

diff --git a/nixos/hosts/tente/default.nix b/nixos/hosts/tente/default.nix
index 277bc58..e853d12 100644
--- a/nixos/hosts/tente/default.nix
+++ b/nixos/hosts/tente/default.nix
@@ -69,6 +69,13 @@ in
       ];
     };
 
+    nginx = {
+      isSystemUser = true;
+      extraGroups = [
+        "www-data"
+      ];
+    };
+
     www-generator = {
       isSystemUser = true;
       group = "www-generator";
@@ -105,7 +112,6 @@ in
 
   services.nginx = {
     enable = true;
-    group = "www-data";
 
     virtualHosts."tente.tailnet" = helpers.serviceIndexHost "tente.tailnet" ports.webUis;