From abfc978a513bfab6d3ef6262f39874d9b64640ff Mon Sep 17 00:00:00 2001
From: Joakim Repomaa <joakim.repomaa@mocoapp.com>
Date: Fri, 20 Feb 2026 21:09:17 +0200
Subject: [PATCH] make sure node owns /nix

---
 flake.nix | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/flake.nix b/flake.nix
index 6dcafe2..70bb029 100644
--- a/flake.nix
+++ b/flake.nix
@@ -144,7 +144,9 @@
                         set -e
                         ${pkgs.dockerTools.shadowSetup}
                         groupadd -r node
-                        useradd -r -g node node
+                        useradd -r -g node -m -d /home/node node
+                        mkdir -p /nix
+                        chown node:node /nix
                       '';
                       copyToRoot = pkgs.buildEnv {
                         name = "image-root";