dedicated ollama user/group

2026-06-24 14:04:09 -07:00
parent 275176b80f
commit db96bd1ac7
1 changed files with 2 additions and 0 deletions
--- a/hw/straylight/default.nix
+++ b/hw/straylight/default.nix
@@ -17,6 +17,8 @@
    services.ollama = {
      enable = true;
      acceleration = "vulkan";
+      user = "ollama";
+      group = "ollama";
    };
    # straylight is the unikernel host. The shared mcp.nix locks the agent
    # down with PrivateDevices=true, which hides /dev/kvm and /dev/net/tun.