[mcp] Reworks how system users are defined. [public-html] Adds system user for pushing updates.

system/hosts/mcp/containers/focalboard.nix

@@ -1,30 +1,17 @@
 { config, ... }:
 let
   inherit (import ./lib.nix config) mkContainer mkPostgresContainer terakoda;
-  userIds = import ./user-ids.nix;
-  
 in {
   imports = [
     (mkPostgresContainer {
       name = "focalboard";
       directory = "/tank/focalboard/db";
-      uid = userIds.focalboard.uid;
-      gid = userIds.focalboard.gid;
+      uid = config.users.users.focalboard.uid;
+      gid = config.users.groups.focalboard.gid;
       passwordSecret = "focalboard/database";
     })
   ];
 
-  users.groups.focalboard = {
-    gid = userIds.focalboard.gid;
-  };
-
-  users.users.focalboard = {
-    uid = userIds.focalboard.uid;
-    isSystemUser = true;
-    description = "System User for Focalboard";
-    group = "focalboard";
-  };
-
   sops.secrets = {
     "focalboard/database" = {
       restartUnits = [ "podman-focalboard.service" "podman-focalboard-postgres.service" ];
@@ -63,7 +50,7 @@ in {
       domain = terakoda;
       dependsOn = [ "focalboard-postgres" ];
       port = 8000;
-      user = "${toString userIds.focalboard.uid}:${toString userIds.focalboard.gid}";
+      user = "${toString config.users.users.focalboard.name}:${config.users.groups.focalboard.name}";
       volumes = [
         "/tank/focalboard/data/files:/opt/focalboard/data/files"
         "${config.sops.templates."focalboard-config.json".path}:/opt/focalboard/config.json:ro"