hmm

systems/x86_64-linux/jallen-nas/users.nix

@@ -53,6 +53,14 @@ in
 
       # Prometheus reads bearer_token_file for the Gitea scrape job at runtime.
       prometheus = {
+        isSystemUser = true;
+        group = "prometheus";
+        extraGroups = [ "keys" ];
+      };
+
+      grafana = {
+        isSystemUser = true;
+        group = "grafana";
         extraGroups = [ "keys" ];
       };
 
@@ -67,6 +75,8 @@ in
     groups = {
       nextcloud-exporter = { };
       crowdsec = { };
+      prometheus = { };
+      grafana = { };
       nut.name = "nut";
       "jallen-nas".name = "jallen-nas";
     };