@@ -31,7 +31,7 @@ in {
3131
3232 port = mkOption {
3333 default = 8888;
34− type = types.ints.u16;
34+ type = types.port;
3535 description = "Port to bind.";
3636 };
3737
@@ -156,11 +156,11 @@ in {
156156 };
157157
158158 config = mkIf cfg.enable {
159− users.extraGroups.cfssl = {
159+ users.groups.cfssl = {
160160 gid = config.ids.gids.cfssl;
161161 };
162162
163− users.extraUsers.cfssl = {
163+ users.users.cfssl = {
164164 description = "cfssl user";
165165 home = cfg.dataDir;
166166 group = "cfssl";
@@ -177,6 +177,7 @@ in {
177177 WorkingDirectory = cfg.dataDir;
178178 Restart = "always";
179179 User = "cfssl";
180+ Group = "cfssl";
180181
181182 ExecStart = with cfg; let
182183 opt = n: v: optionalString (v != null) ''-${n}="${v}"'';