added signalbot servec account

.vscode/settings.json

@@ -256,6 +256,7 @@
     "sessionmaker",
     "sessionstore",
     "shellcheck",
+    "signalbot",
     "signon",
     "Signons",
     "skia",
@@ -305,6 +306,7 @@
     "useragent",
     "usernamehw",
     "userprefs",
+    "vaninventory",
     "vfat",
     "victron",
     "virt",

systems/brain/services/van_inventory.nix

@@ -6,11 +6,13 @@
 {
   networking.firewall.allowedTCPPorts = [ 8001 ];
 
-  users.users.vaninventory = {
+  users = {
+    users.vaninventory = {
       isSystemUser = true;
       group = "vaninventory";
     };
-  users.groups.vaninventory = { };
+    groups.vaninventory = { };
+  };
 
   systemd.services.van_inventory = {
     description = "Van Inventory API";

systems/jeeves/services/postgress.nix

@@ -30,6 +30,9 @@ in
       local hass     hass     trust
       local gitea    gitea    trust
 
+      # signalbot
+      local richie  signalbot   trust
+
       # math
       local postgres  math   trust
       host  postgres  math   127.0.0.1/32    trust
@@ -98,6 +101,12 @@ in
           replication = true;
         };
       }
+      {
+        name = "signalbot";
+        ensureClauses = {
+          login = true;
+        };
+      }
     ];
     ensureDatabases = [
       "hass"

systems/jeeves/services/signal_bot.nix

@@ -7,6 +7,14 @@ let
   vars = import ../vars.nix;
 in
 {
+  users = {
+    users.signalbot = {
+      isSystemUser = true;
+      group = "signalbot";
+    };
+    groups.signalbot = { };
+  };
+
   systemd.services.signal-bot = {
     description = "Signal command and control bot";
     after = [
@@ -22,6 +30,8 @@ in
 
     serviceConfig = {
       Type = "simple";
+      User = "signalbot";
+      Group = "signalbot";
       EnvironmentFile = "${vars.secrets}/services/signal-bot";
       ExecStart = "${pkgs.my_python}/bin/python -m python.signal_bot.main";
       StateDirectory = "signal-bot";