From 35544e663511d88383976acf7de6a70f50809d04 Mon Sep 17 00:00:00 2001
From: Benedikt Peetz <benedikt.peetz@b-peetz.de>
Date: Sat, 30 May 2026 19:45:17 +0200
Subject: modules/taskchampion-sync: Avoid issue with DynamicUser

---
 modules/by-name/ta/taskchampion-sync/module.nix | 15 ++++++++++++++-
 1 file changed, 14 insertions(+), 1 deletion(-)

(limited to 'modules/by-name/ta/taskchampion-sync/module.nix')

diff --git a/modules/by-name/ta/taskchampion-sync/module.nix b/modules/by-name/ta/taskchampion-sync/module.nix
index a722883..a7cba30 100644
--- a/modules/by-name/ta/taskchampion-sync/module.nix
+++ b/modules/by-name/ta/taskchampion-sync/module.nix
@@ -18,7 +18,10 @@ in {
 
   config = lib.mkIf cfg.enable {
     users = {
-      users.taskchampion.uid = config.vhack.constants.ids.uids.taskchampion;
+      users.taskchampion = {
+        uid = config.vhack.constants.ids.uids.taskchampion;
+        group = "taskchampion";
+      };
       groups.taskchampion.gid = config.vhack.constants.ids.uids.taskchampion;
     };
 
@@ -34,6 +37,16 @@ in {
       nginx.enable = true;
     };
 
+    systemd.services.taskchampion-sync-server = {
+      serviceConfig = {
+        # The upstream service uses DynamicUsers, which currently poses issues to our
+        # directory persisting strategy.
+        User = "taskchampion";
+        Group = "taskchampion";
+        DynamicUser = lib.mkForce false;
+      };
+    };
+
     services = {
       taskchampion-sync-server = {
         enable = true;
-- 
cgit v1.3.1