vidhar: prometheus: unbound: ...

1 files changed, 7 insertions, 1 deletions

diff --git a/hosts/vidhar/prometheus.nix b/hosts/vidhar/prometheus.nix
index 2ad6667a..7cbb36d4 100644
--- a/hosts/vidhar/prometheus.nix
+++ b/hosts/vidhar/prometheus.nix
@@ -42,6 +42,7 @@ in {
         unbound = {
           enable = true;
           controlInterface = "/run/unbound/unbound.ctl";
+          group = config.services.unbound.group;
         };
         wireguard.enable = true;
       };
@@ -110,7 +111,12 @@ in {
       ];
     };
     users.users.${config.services.prometheus.exporters.unbound.user} = {
-      extraGroups = [ config.services.unbound.group ];
+      description = "Prometheus unbound exporter service user";
+      isSystemUser = true;
+      group = config.services.unbound.group;
+    };
+    systemd.services."prometheus-unbound-exporter".serviceConfig = {
+      DynamicUser = false;
     };
 
     systemd.services."prometheus-zte-exporter@10.141.1.3" = {