change systemd config

nixarr/jellyseerr/default.nix

@@ -91,8 +91,8 @@ in {
       }
     ];
 
-    services.jellyseerr = {
+    util-nixarr.services.jellyseerr = {
-      enable = cfg.enable;
+      enable = true;
       package = cfg.package;
       openFirewall = cfg.openFirewall;
       port = cfg.port;

nixarr/jellyseerr/jellyseerr-module/default.nix

@@ -56,24 +56,26 @@ in {
       serviceConfig = {
         Type = "exec";
         StateDirectory = "jellyseerr";
+        DynamicUser = false;
         User = cfg.user;
+        Group = cfg.group;
         ExecStart = lib.getExe cfg.package;
         Restart = "on-failure";
-        ProtectHome = true;
+        # ProtectHome = true;
-        ProtectSystem = "strict";
+        # ProtectSystem = "strict";
-        PrivateTmp = true;
+        # PrivateTmp = true;
-        PrivateDevices = true;
+        # PrivateDevices = true;
-        ProtectHostname = true;
+        # ProtectHostname = true;
-        ProtectClock = true;
+        # ProtectClock = true;
-        ProtectKernelTunables = true;
+        # ProtectKernelTunables = true;
-        ProtectKernelModules = true;
+        # ProtectKernelModules = true;
-        ProtectKernelLogs = true;
+        # ProtectKernelLogs = true;
-        ProtectControlGroups = true;
+        # ProtectControlGroups = true;
-        NoNewPrivileges = true;
+        # NoNewPrivileges = true;
-        RestrictRealtime = true;
+        # RestrictRealtime = true;
-        RestrictSUIDSGID = true;
+        # RestrictSUIDSGID = true;
-        RemoveIPC = true;
+        # RemoveIPC = true;
-        PrivateMounts = true;
+        # PrivateMounts = true;
       };
     };