Don't use isolated service

1 files changed, 5 insertions, 7 deletions

diff --git a/flake.nix b/flake.nix
index f006e21..df324a6 100644
--- a/flake.nix
+++ b/flake.nix
@@ -338,18 +338,16 @@
             };
           };
           config = lib.mkIf cfg.enable {
+            users.users.fig = {
+              isSystemUser = true;
+              group = "fig";
+            };
             systemd.services."colonq.fig-web" = {
               wantedBy = ["multi-user.target"];
               serviceConfig = {
+                User = "fig";
                 Restart = "on-failure";
                 ExecStart = "${haskellPackages.fig-web}/bin/fig-web public --bus-host ${cfg.busHost} --bus-port ${toString cfg.busPort} --config ${cfg.configFile}";
-                DynamicUser = "yes";
-                RuntimeDirectory = "colonq.fig-web";
-                RuntimeDirectoryMode = "0755";
-                StateDirectory = "colonq.fig-web";
-                StateDirectoryMode = "0700";
-                CacheDirectory = "colonq.fig-web";
-                CacheDirectoryMode = "0750";
               };
             };
           };