From 4e9059dc072f09e3d44c0f2a7a841981062c1f72 Mon Sep 17 00:00:00 2001
From: nixbitcoin <nixbitcoin@i2pmail.org>
Date: Thu, 18 Feb 2021 10:42:21 +0000
Subject: [PATCH] bitcoind: rename group bitcoinrpc -> bitcoinrpc-public

This makes it clear that services with this group can only use
public RPC calls.
---
 modules/bitcoind.nix     | 4 ++--
 modules/btcpayserver.nix | 2 +-
 modules/clightning.nix   | 2 +-
 modules/electrs.nix      | 2 +-
 modules/liquid.nix       | 2 +-
 modules/lnd.nix          | 2 +-
 6 files changed, 7 insertions(+), 7 deletions(-)

diff --git a/modules/bitcoind.nix b/modules/bitcoind.nix
index e834c65..f5fce4d 100644
--- a/modules/bitcoind.nix
+++ b/modules/bitcoind.nix
@@ -384,13 +384,13 @@ in {
 
     users.users.${cfg.user}.group = cfg.group;
     users.groups.${cfg.group} = {};
-    users.groups.bitcoinrpc = {};
+    users.groups.bitcoinrpc-public = {};
     nix-bitcoin.operator.groups = [ cfg.group ];
 
     nix-bitcoin.secrets.bitcoin-rpcpassword-privileged.user = cfg.user;
     nix-bitcoin.secrets.bitcoin-rpcpassword-public = {
       user = cfg.user;
-      group = "bitcoinrpc";
+      group = "bitcoinrpc-public";
     };
 
     nix-bitcoin.secrets.bitcoin-HMAC-privileged.user = cfg.user;
diff --git a/modules/btcpayserver.nix b/modules/btcpayserver.nix
index a425777..d529883 100644
--- a/modules/btcpayserver.nix
+++ b/modules/btcpayserver.nix
@@ -212,7 +212,7 @@ in {
 
     users.users.${cfg.nbxplorer.user} = {
       group = cfg.nbxplorer.group;
-      extraGroups = [ "bitcoinrpc" ];
+      extraGroups = [ "bitcoinrpc-public" ];
       home = cfg.nbxplorer.dataDir;
     };
     users.groups.${cfg.nbxplorer.group} = {};
diff --git a/modules/clightning.nix b/modules/clightning.nix
index 69c53aa..6015b5a 100644
--- a/modules/clightning.nix
+++ b/modules/clightning.nix
@@ -144,7 +144,7 @@ in {
 
     users.users.${cfg.user} = {
       group = cfg.group;
-      extraGroups = [ "bitcoinrpc" ];
+      extraGroups = [ "bitcoinrpc-public" ];
     };
     users.groups.${cfg.group} = {};
     nix-bitcoin.operator.groups = [ cfg.group ];
diff --git a/modules/electrs.nix b/modules/electrs.nix
index 7c7956a..2828db4 100644
--- a/modules/electrs.nix
+++ b/modules/electrs.nix
@@ -110,7 +110,7 @@ in {
 
     users.users.${cfg.user} = {
       group = cfg.group;
-      extraGroups = [ "bitcoinrpc" ] ++ optionals cfg.high-memory [ bitcoind.user ];
+      extraGroups = [ "bitcoinrpc-public" ] ++ optionals cfg.high-memory [ bitcoind.user ];
     };
     users.groups.${cfg.group} = {};
   };
diff --git a/modules/liquid.nix b/modules/liquid.nix
index de4931d..2c6e2f9 100644
--- a/modules/liquid.nix
+++ b/modules/liquid.nix
@@ -247,7 +247,7 @@ in {
 
     users.users.${cfg.user} = {
       group = cfg.group;
-      extraGroups = [ "bitcoinrpc" ];
+      extraGroups = [ "bitcoinrpc-public" ];
     };
     users.groups.${cfg.group} = {};
     nix-bitcoin.operator.groups = [ cfg.group ];
diff --git a/modules/lnd.nix b/modules/lnd.nix
index ec8f33d..aa6aada 100644
--- a/modules/lnd.nix
+++ b/modules/lnd.nix
@@ -275,7 +275,7 @@ in {
 
     users.users.${cfg.user} = {
       group = cfg.group;
-      extraGroups = [ "bitcoinrpc" ];
+      extraGroups = [ "bitcoinrpc-public" ];
       home = cfg.dataDir; # lnd creates .lnd dir in HOME
     };
     users.groups.${cfg.group} = {};