From 37f47c82a823023c3b8108b9701d4aa9864b2281 Mon Sep 17 00:00:00 2001
From: SebastianStork <sebastian.stork@pm.me>
Date: Tue, 7 Oct 2025 09:50:17 +0200
Subject: [PATCH] actualbudget: Fix persistence

---
 modules/system/services/actualbudget.nix | 14 ++++++++++++++
 1 file changed, 14 insertions(+)

diff --git a/modules/system/services/actualbudget.nix b/modules/system/services/actualbudget.nix
index d3feeaa..adc671a 100644
--- a/modules/system/services/actualbudget.nix
+++ b/modules/system/services/actualbudget.nix
@@ -24,6 +24,20 @@ in
       ports.tcp.list = [ cfg.port ];
     };
 
+    users = {
+      users.actual = {
+        isSystemUser = true;
+        group = config.users.groups.actual.name;
+      };
+      groups.actual = {};
+    };
+
+    systemd.services.actual.serviceConfig = {
+      DynamicUser = lib.mkForce false;
+      PrivateTmp = true;
+      RemoveIPC = true;
+    };
+
     services.actual = {
       enable = true;
       settings = {