secrets

profiles/domeneshop-dyndns/default.nix

@@ -38,7 +38,7 @@ in
       in {
         User  = "domeneshop";
         Group = "domeneshop";
-        DynamicUser = true;
+        #DynamicUser = true; # maybe re-enable when sops-nix is in place?
         ExecStart = "${prog}/bin/domeneshop-dyndns-updater.sh";
         PrivateTmp = true;
       };
@@ -52,6 +52,9 @@ in
         Unit = "domeneshop-updater.service";
       };
     };
+    users.users.domeneshop.isSystemUser = true;
+    users.users.group = "domeneshop";
+    users.groups.domeneshop = {};
 
   };
 }