grafana

systems/x86_64-linux/jallen-nas/users.nix

@@ -44,14 +44,16 @@ in
       };
       root.shell = pkgs.zsh;
 
-      # Allow the Prometheus Nextcloud exporter to read its password secret.
-      prometheus-nextcloud-exporter = {
+      # The NixOS nextcloud exporter runs as 'nextcloud-exporter' (the default
+      # generated by the exporter base module).  Add it to 'keys' so it can
+      # read the SOPS-managed adminpassword secret.
+      nextcloud-exporter = {
         isSystemUser = true;
-        group = "prometheus-nextcloud-exporter";
+        group = "nextcloud-exporter";
         extraGroups = [ "keys" ];
       };
     };
 
-    groups.prometheus-nextcloud-exporter = { };
+    groups.nextcloud-exporter = { };
   };
 }