Merge pull request #45441 from lopsided98/cfssl-user-fix

nixos/cfssl: don't create user/group unless service is enabled
NixOS · Aug 21, 2018 · f830694 · f830694
2 parents 28e51c7 + c6191c8
commit f830694
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/nixos/modules/services/security/cfssl.nix b/nixos/modules/services/security/cfssl.nix
@@ -146,7 +146,7 @@ in {
     };
   };
 
-  config = {
+  config = mkIf cfg.enable {
     users.extraGroups.cfssl = {
       gid = config.ids.gids.cfssl;
     };
@@ -159,7 +159,7 @@ in {
       uid = config.ids.uids.cfssl;
     };
 
-    systemd.services.cfssl = mkIf cfg.enable {
+    systemd.services.cfssl = {
       description = "CFSSL CA API server";
       wantedBy = [ "multi-user.target" ];
       after = [ "network.target" ];