config = mkIf cfg.enable {
- secrets.keys = [
- {
- dest = "naemon/resources.cfg";
+ secrets.keys = {
+ "naemon/resources.cfg" = {
user = cfg.user;
group = cfg.group;
permissions = "0400";
$USER1$=${pkgs.monitoring-plugins}/libexec
${cfg.extraResource}
'';
- }
- ];
+ };
+ };
users.users = optionalAttrs (cfg.user == "naemon") {
naemon = {