prometheus

systems/x86_64-linux/jallen-nas/users.nix

@@ -43,6 +43,15 @@ in
         hashedPasswordFile = passwordFile;
       };
       root.shell = pkgs.zsh;
+
+      # Allow the Prometheus Nextcloud exporter to read its password secret.
+      prometheus-nextcloud-exporter = {
+        isSystemUser = true;
+        group = "prometheus-nextcloud-exporter";
+        extraGroups = [ "keys" ];
+      };
     };
+
+    groups.prometheus-nextcloud-exporter = { };
   };
 }