modular-services: document ghostunnel as a service that was not written for use as a user-level service

Signed-off-by: cinereal <cinereal@riseup.net>
This commit is contained in:
cinereal 2026-05-05 11:24:43 +02:00 committed by Robert Helgesson
parent 67625b8c31
commit fdb2ccba9d
3 changed files with 39 additions and 4 deletions

View file

@ -62,6 +62,22 @@ For example, `pkgs.php`'s [`php-fpm`]:
}
```
Some packages ship modules written for system services that include
directives the user-session manager cannot honour (`DynamicUser`,
`AmbientCapabilities`, ...). The unit is still generated with those
directives -- user systemd silently ignores what it cannot apply.
`WantedBy=multi-user.target` is automatically normalized to
`WantedBy=default.target`. Other directives can be overridden per
service:
```nix
home.services."tunnel" = {
imports = [ pkgs.ghostunnel.passthru.services.default ];
# ...
systemd.services."tunnel".serviceConfig.DynamicUser = lib.mkForce false;
};
```
## Configuration data {#sec-usage-modular-services-configdata}
Each service can declare configuration files via `configData.<name>`.